CVEvulnerability

CVE-2003-1310

4.6 MEDIUM Published 2003-12-31 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2003-12-31
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P

Description

The DeviceIoControl function in the Norton Device Driver (NAVAP.sys) in Symantec Norton AntiVirus 2002 allows local users to gain privileges by overwriting memory locations via certain control codes (aka "Device Driver Attack").

Affected configurations

• symantec norton antivirus 2002 • symantec norton antivirus 2003

References

http://sec-labs.hack.pl/papers/win32ddc.php sec-labs.hack.pl
http://secunia.com/advisories/9460 Vendor Advisory
http://www.osvdb.org/4362 www.osvdb.org
http://www.securityfocus.com/bid/8329 Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/12824 exchange.xforce.ibmcloud.com
http://sec-labs.hack.pl/papers/win32ddc.php sec-labs.hack.pl
http://secunia.com/advisories/9460 Vendor Advisory
http://www.osvdb.org/4362 www.osvdb.org
http://www.securityfocus.com/bid/8329 Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/12824 exchange.xforce.ibmcloud.com