NetSight
IP …
low1.9Public exploit code

CVE-2007-1476

The SymTDI device driver (SYMTDI.SYS) in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security 2005 and 2006, AntiVirus Corporate Editi…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The SymTDI device driver (SYMTDI.SYS) in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security 2005 and 2006, AntiVirus Corporate Edition 3.0.x through 10.1.x, and other Norton products, allows local users to cause a denial of service (system crash) by sending crafted data to the driver's \Device file, which triggers invalid memory access, a different vulnerability than CVE-2006-4855.

Affected products

VendorProductAffected versions
SymantecClient Security
Versions 2.0, 2.0.1, 2.0.1_build_9.0.1.1000, 2.0.2, 2.0.2_build_9.0.2.1000, 2.0.3
SymantecNorton Antispam
Version 2005
SymantecNorton Antivirus
Versions 3.0, 9.0, 9.0.0.338, 9.0.1, 9.0.1.1.1000, 9.0.1.1000
SymantecNorton Internet Security
Versions 2005, 2006
SymantecNorton Personal Firewall
through 2006_9.1.1.7
Versions 2005, 2006, 2006_9.1.0.33
SymantecNorton System Works
Versions 2005, 2006

Weakness classification

CWE-20

References