Unscored severity · published Sep 19, 2006
CVE-2006-4855
The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec…
–
CVSS
1.3%
EPSS
No
On KEV
Description
The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0, and 10.1, Symantec pcAnywhere 11.5 only, and Symantec Host, allows local users to cause a denial of service (system crash) via invalid data, as demonstrated by calling DeviceIoControl to send the data.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 71% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Client Security · Symantec
1.0; 1.0.0_b8.01.9378; 1.0.1; 1.0.1_build_8.01.425a; 1.0.1_build_8.01.429c; 1.0.1_build_8.01.434; +27 more · source: NVD
HI
Host Ids · Symantec
All versions, or not specified · source: NVD
NA
Norton Antivirus · Symantec
2.1; 8.0; 8.0.1; 8.0.1.425a; 8.0.1.425c; 8.0.1.501; +34 more · source: NVD
NI
Norton Internet Security · Symantec
2003; 2003; 2004; 2004; 2005; 2005; +2 more · source: NVD
NP
Norton Personal Firewall · Symantec
2003; 2004; 2005; 2006 · source: NVD
NS
Norton System Works · Symantec
2003_professional_edition; 2004; 2004_professional_edition; 2005; 2005_premier; 2006 · source: NVD
PC
Pcanywhere · Symantec
11.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-4855
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-4855
Vendor Advisory
http://secunia.com/advisories/21938
securityreason.com
http://securityreason.com/securityalert/1591
securityresponse.symantec.com
http://securityresponse.symantec.com/avcenter/security/Content/2006.09.20a.html
securitytracker.com
http://securitytracker.com/id?1016889
securitytracker.com
http://securitytracker.com/id?1016892
securitytracker.com
http://securitytracker.com/id?1016893
More from Client Security
–
CVE-2010-0107
Buffer overflow in an ActiveX control (SYMLTCOM.dll) in Symantec N360 1.0 and 2.0; Norton Internet Security, AntiVirus, SystemWorks, and Confidential 2006 through 2008; and…
–
CVE-2010-0108
Buffer overflow in the cliproxy.objects.1 ActiveX control in the Symantec Client Proxy (CLIproxy.dll) in Symantec AntiVirus 10.0.x, 10.1.x before MR9, and 10.2.x before MR4; and…
–
CVE-2010-0106
The on-demand scanning in Symantec AntiVirus 10.0.x and 10.1.x before MR9, AntiVirus 10.2.x, and Client Security 3.0.x and 3.1.x before MR9, when Tamper protection is disabled,…
–
CVE-2009-3104
Unspecified vulnerability in Symantec Norton AntiVirus 2005 through 2008; Norton Internet Security 2005 through 2008; AntiVirus Corporate Edition 9.0 before MR7, 10.0, 10.1 before…
–
CVE-2009-1432
Symantec Reporting Server, as used in Symantec AntiVirus (SAV) Corporate Edition 10.1 before 10.1 MR8 and 10.2 before 10.2 MR2, Symantec Client Security (SCS) before 3.1 MR8, and…