VulnerabilityModified
CVE-2006-3455
The SAVRT.SYS device driver, as used in Symantec AntiVirus Corporate Edition 8.1 and 9.0.x up to 9.0.3, and Symantec Client Security 1.1 and 2.0.x up to 2.0.3, allows local users to execute arbitrary code via a modified address for the output buffer…
MEDIUM 4.3EPSS 0.38%
Does this matter?
Lower severity and a low EPSS score (0.38%). Track it; it rarely justifies an emergency change on its own.
Description
The SAVRT.SYS device driver, as used in Symantec AntiVirus Corporate Edition 8.1 and 9.0.x up to 9.0.3, and Symantec Client Security 1.1 and 2.0.x up to 2.0.3, allows local users to execute arbitrary code via a modified address for the output buffer argument to the DeviceIOControl function.
- CVSS 2.0
- 4.3 MEDIUMAV:L/AC:L/Au:S/C:P/I:P/A:P
- EPSS
- 0.38% probability · 32th percentile
- CISA KEV
- Not listed
- Affected
- symantec/client security · symantec/norton antivirus
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/22536
- http://securitytracker.com/id?1017108
- http://securitytracker.com/id?1017109
- http://www.securityfocus.com/archive/1/449524/100/0/threaded
- http://www.securityfocus.com/bid/20684
- http://www.symantec.com/avcenter/security/Content/2006.10.23.htmlPatch
- http://www.vupen.com/english/advisories/2006/4157
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29762
- http://secunia.com/advisories/22536
- http://securitytracker.com/id?1017108
- http://securitytracker.com/id?1017109
- http://www.securityfocus.com/archive/1/449524/100/0/threaded
- http://www.securityfocus.com/bid/20684
- http://www.symantec.com/avcenter/security/Content/2006.10.23.htmlPatch
- http://www.vupen.com/english/advisories/2006/4157
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29762
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.