NetSight
IP …
medium4.9Public exploit code

CVE-2006-4855

The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, S…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0, and 10.1, Symantec pcAnywhere 11.5 only, and Symantec Host, allows local users to cause a denial of service (system crash) via invalid data, as demonstrated by calling DeviceIoControl to send the data.

Affected products

VendorProductAffected versions
SymantecClient Security
Versions 1.0, 1.0.0_b8.01.9378, 1.0.1, 1.0.1_build_8.01.425a, 1.0.1_build_8.01.429c, 1.0.1_build_8.01.434
SymantecHost Ids
All versions
SymantecNorton Antivirus
Versions 2.1, 8.0, 8.0.1, 8.0.1.425a, 8.0.1.425c, 8.0.1.501
SymantecNorton Internet Security
Versions 2003, 2004, 2005, 2006, 2007
SymantecNorton Personal Firewall
Versions 2003, 2004, 2005, 2006
SymantecNorton System Works
Versions 2003_professional_edition, 2004, 2004_professional_edition, 2005, 2005_premier, 2006
SymantecPcanywhere
Version 11.5

Weakness classification

CWE-399

References