NVD

Id
63471  
Name
CVE-2006-4855  
Description
The DeviceSymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0, and 10.1, Symantec pcAnywhere 11.5 only, and Symantec Host, allows local users to cause a denial of service (system crash) via invalid data, as demonstrated by calling DeviceIoControl to send the data.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2016-12-20  
Published
2006-09-19  
Modified Date
2011-07-18  
Seq
2006-4855  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
330826 63471 CVE-2006-4855 1591  View
330827 63471 CVE-2006-4855 http://securityresponse.symantec.com/avcenter/security/Content/2006.09.20a.html  View
330828 63471 CVE-2006-4855 1016889  View
330829 63471 CVE-2006-4855 1016892  View
330830 63471 CVE-2006-4855 1016893  View
330831 63471 CVE-2006-4855 1016894  View
330832 63471 CVE-2006-4855 1016895  View
330833 63471 CVE-2006-4855 1016896  View
330834 63471 CVE-2006-4855 1016897  View
330835 63471 CVE-2006-4855 1016898  View
330836 63471 CVE-2006-4855 http://www.matousec.com/info/advisories/Norton-Insufficient-validation-of-SymEvent-driver-input-buffer.php  View
330837 63471 CVE-2006-4855 20060915 Symantec Norton Insufficient validation of "SymEvent" driver input buffer  View
330838 63471 CVE-2006-4855 20051  View
330839 63471 CVE-2006-4855 ADV-2006-3636  View
330840 63471 CVE-2006-4855 symantec-firewall-symevent-dos(28960)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60921 JVNDB-2006-003187 Symantec Norton Personal Firewall などの DeviceSymEvent ドライバにおけるサービス運用妨害 (DoS) の脆弱性 Symantec Norton Personal Firewall、Norton Personal Firewall、Internet Security、AntiVirus、SystemWorks、Symantec Client Security SCS、Symantec AntiVirus Corporate Edition SAVCE、Symantec pcAnywhere、および Symantec Host の DeviceSymEvent ドライバには、サービス運用妨害 (システムクラッシュ) 状態となる脆弱性が存在します。 CVE-2006-4855 20957 CVE-2006-4855 63471 4.9 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003187.html 2006-09-19 2012-12-20 View