Unscored severity · published Mar 16, 2007
CVE-2007-1476
The SymTDI device driver (SYMTDI.SYS) in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security 2005 and 2006, AntiVirus Corporate Edition 3.0.x through…
–
CVSS
0.9%
EPSS
No
On KEV
Description
The SymTDI device driver (SYMTDI.SYS) in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security 2005 and 2006, AntiVirus Corporate Edition 3.0.x through 10.1.x, and other Norton products, allows local users to cause a denial of service (system crash) by sending crafted data to the driver's \Device file, which triggers invalid memory access, a different vulnerability than CVE-2006-4855.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 59% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Client Security · Symantec
2.0; 2.0; 2.0; 2.0; 2.0.1; 2.0.1_build_9.0.1.1000; +34 more · source: NVD
NA
Norton Antispam · Symantec
2005 · source: NVD
NA
Norton Antivirus · Symantec
3.0; 9.0; 9.0.0.338; 9.0.1; 9.0.1.1.1000; 9.0.1.1000; +27 more · source: NVD
NI
Norton Internet Security · Symantec
2005; 2006 · source: NVD
NP
Norton Personal Firewall · Symantec
through 2006_9.1.1.7; 2005; 2006; 2006_9.1.0.33 · source: NVD
NS
Norton System Works · Symantec
2005; 2006 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1476
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1476
marc.info
http://marc.info/?l=full-disclosure&m=117396596027148&w=2
osvdb.org
http://osvdb.org/35088
securityreason.com
http://securityreason.com/securityalert/2438
securitytracker.com
http://securitytracker.com/id?1018656
Vendor Advisory
http://www.matousec.com/info/advisories/Norton-Insufficient-validation-of-SymTDI-driver-input-buffer.php
www.securityfocus.com
http://www.securityfocus.com/archive/1/462926/100/0/threaded
More from Client Security
–
CVE-2010-0107
Buffer overflow in an ActiveX control (SYMLTCOM.dll) in Symantec N360 1.0 and 2.0; Norton Internet Security, AntiVirus, SystemWorks, and Confidential 2006 through 2008; and…
–
CVE-2010-0108
Buffer overflow in the cliproxy.objects.1 ActiveX control in the Symantec Client Proxy (CLIproxy.dll) in Symantec AntiVirus 10.0.x, 10.1.x before MR9, and 10.2.x before MR4; and…
–
CVE-2010-0106
The on-demand scanning in Symantec AntiVirus 10.0.x and 10.1.x before MR9, AntiVirus 10.2.x, and Client Security 3.0.x and 3.1.x before MR9, when Tamper protection is disabled,…
–
CVE-2009-3104
Unspecified vulnerability in Symantec Norton AntiVirus 2005 through 2008; Norton Internet Security 2005 through 2008; AntiVirus Corporate Edition 9.0 before MR7, 10.0, 10.1 before…
–
CVE-2009-1432
Symantec Reporting Server, as used in Symantec AntiVirus (SAV) Corporate Edition 10.1 before 10.1 MR8 and 10.2 before 10.2 MR2, Symantec Client Security (SCS) before 3.1 MR8, and…