NVD

Id
63424  
Name
CVE-2006-4802  
Description
Format string vulnerability in the Real Time Virus Scan service in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allows local users to execute arbitrary code via an unspecified vector related to alert notification messages, a different vector than CVE-2006-3454, a "second format string vulnerability" as found by the vendor.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-09-14  
Modified Date
2008-09-05  
Seq
2006-4802  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
330508 63424 CVE-2006-4802 http://securityresponse.symantec.com/avcenter/security/Content/2006.09.13.html  View
330509 63424 CVE-2006-4802 1016842  View
330510 63424 CVE-2006-4802 20060918 Symantec Security Advisory: Symantec AntiVirus Corporate Edition  View
330511 63424 CVE-2006-4802 19986  View
330512 63424 CVE-2006-4802 symantecantivirus-alert-dos(28937)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60910 JVNDB-2006-003176 Symantec AntiVirus Corporate Edition などの Real Time Virus Scan サービスにおけるフォーマットストリングの脆弱性 Symantec AntiVirus Corporate Edition、および Client Security の Real Time Virus Scan サービスは、警告通知メッセージに関する処理に不備があるため、フォーマットストリングの脆弱性が存在します。 CVE-2006-4802 20904 CVE-2006-4802 63424 4.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003176.html 2006-09-13 2012-12-20 View