Medium severity · published Feb 19, 2018
CVE-2011-3477
GEAR Software CD DVD Filter driver (aka GEARAspiWDM.sys), as used in Symantec Backup Exec System Recovery 8.5 and BESR 2010, Symantec System Recovery 2011, Norton 360, and Norton…
5.5
CVSS
0.6%
EPSS
No
On KEV
Description
GEAR Software CD DVD Filter driver (aka GEARAspiWDM.sys), as used in Symantec Backup Exec System Recovery 8.5 and BESR 2010, Symantec System Recovery 2011, Norton 360, and Norton Ghost, allows local users to cause a denial of service (system crash) via unspecified vectors.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 50% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BE
Backup Exec System Recovery · Symantec
8.5; 9.0; 2010 · source: NVD
N3
Norton 360 · Symantec
5.0 · source: NVD
NG
Norton Ghost · Symantec
through 15.0 · source: NVD
SR
System Recovery 2011 · Symantec
10.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-3477
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-3477
Third Party Advisory
http://www.securityfocus.com/bid/47822
Patch
https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20111109_00