CVE

Id
24833  
CVE No.
CVE-2007-1476  
Status
Candidate  
Description
The SymTDI device driver (SYMTDI.SYS) in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security 2005 and 2006, AntiVirus Corporate Edition 3.0.x through 10.1.x, and other Norton products, allows local users to cause a denial of service (system crash) by sending crafted data to the driver"s Device file, which triggers invalid memory access, a different vulnerability than CVE-2006-4855.  
Phase
Assigned (20070316)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
246025 24833 CVE-2007-1476 BUGTRAQ:20070315 Norton Insufficient validation of "SymTDI" driver input buffer  View
246026 24833 CVE-2007-1476 URL:http://www.securityfocus.com/archive/1/archive/1/462926/100/0/threaded  View
246027 24833 CVE-2007-1476 FULLDISC:20070315 Norton Insufficient validation of "SymTDI" driver  View
246028 24833 CVE-2007-1476 URL:http://marc.info/?l=full-disclosure&m=117396596027148&w=2  View
246029 24833 CVE-2007-1476 MISC:http://www.matousec.com/info/advisories/Norton-Insufficient-validation-of-SymTDI-driver-input-buffer.php  View
246030 24833 CVE-2007-1476 CONFIRM:http://www.symantec.com/avcenter/security/Content/2007.09.05.html  View
246031 24833 CVE-2007-1476 BID:22977  View
246032 24833 CVE-2007-1476 URL:http://www.securityfocus.com/bid/22977  View
246033 24833 CVE-2007-1476 OSVDB:35088  View
246034 24833 CVE-2007-1476 URL:http://osvdb.org/35088  View
246035 24833 CVE-2007-1476 SECTRACK:1018656  View
246036 24833 CVE-2007-1476 URL:http://securitytracker.com/id?1018656  View
246037 24833 CVE-2007-1476 SREASON:2438  View
246038 24833 CVE-2007-1476 URL:http://securityreason.com/securityalert/2438  View
246039 24833 CVE-2007-1476 XF:symantec-firewall-symtdi-dos(33003)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54829 JVNDB-2007-003521 McGallery の download.php におけるスクリプトソースコードを取得される脆弱性 McGallery の download.php には、任意のファイル、およびスクリプトソースコードを取得される脆弱性が存在します。 CVE-2007-1478 24833 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003521.html  View