medium4.6Public exploit code
CVE-2003-1310
The DeviceIoControl function in the Norton Device Driver (NAVAP.sys) in Symantec Norton AntiVirus 2002 allows local users to gain privileges by overwriting mem…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Symantec Norton AntiVirus 2002/2003 - Device Driver Memory Overwrite2003-08-02 · local · windows · Verified
Impact
The DeviceIoControl function in the Norton Device Driver (NAVAP.sys) in Symantec Norton AntiVirus 2002 allows local users to gain privileges by overwriting memory locations via certain control codes (aka "Device Driver Attack").
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Symantec | Norton Antivirus | Versions 2002, 2003 |
References
- NVD record
- CVE.org record
- http://sec-labs.hack.pl/papers/win32ddc.php
- http://secunia.com/advisories/9460
- http://www.osvdb.org/4362
- http://www.securityfocus.com/bid/8329
- https://exchange.xforce.ibmcloud.com/vulnerabilities/12824
- http://sec-labs.hack.pl/papers/win32ddc.php
- http://secunia.com/advisories/9460
- http://www.osvdb.org/4362
- http://www.securityfocus.com/bid/8329
- https://exchange.xforce.ibmcloud.com/vulnerabilities/12824