NVD

Id
62128  
Name
CVE-2006-3454  
Description
Multiple format string vulnerabilities in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allow local users to execute arbitrary code via format strings in (1) Tamper Protection and (2) Virus Alert Notification messages.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-09-13  
Modified Date
2011-03-07  
Seq
2006-3454  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
321699 62128 CVE-2006-3454 http://layereddefense.com/SAV13SEPT.html  View
321700 62128 CVE-2006-3454 http://securityresponse.symantec.com/avcenter/security/Content/2006.09.13.html  View
321701 62128 CVE-2006-3454 1016842  View
321702 62128 CVE-2006-3454 20060914 Layered Defense Advisory :Symantec AntiVirus Corporate Edition Format String Vulnerability  View
321703 62128 CVE-2006-3454 20060918 Symantec Security Advisory: Symantec AntiVirus Corporate Edition  View
321704 62128 CVE-2006-3454 19986  View
321705 62128 CVE-2006-3454 ADV-2006-3599  View
321706 62128 CVE-2006-3454 symantecantivirus-messages-code-execution(28936)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60462 JVNDB-2006-002728 Symantec AntiVirus Corporate Edition などにおけるフォーマットストリングの脆弱性 Symantec AntiVirus Corporate Edition、および Client Security には、フォーマットストリングの脆弱性が存在します。 CVE-2006-3454 19556 CVE-2006-3454 62128 7.2 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002728.html 2006-09-13 2012-12-20 View