CVEvulnerability
CVE-2006-3455
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-10-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:L/AC:L/Au:S/C:P/I:P/A:P
Description
The SAVRT.SYS device driver, as used in Symantec AntiVirus Corporate Edition 8.1 and 9.0.x up to 9.0.3, and Symantec Client Security 1.1 and 2.0.x up to 2.0.3, allows local users to execute arbitrary code via a modified address for the output buffer argument to the DeviceIOControl function.
Affected configurations
• symantec client security 1.1
• symantec client security 1.1.1
• symantec client security 1.1.1 build 393
• symantec client security 1.1.1 mr1 build 8.1.1.314a
• symantec client security 1.1.1 mr2 build 8.1.1.319
• symantec client security 1.1.1 mr3 build 8.1.1.323
• symantec client security 1.1.1 mr4 build 8.1.1.329
• symantec client security 1.1.1 mr5 build 8.1.1.336
• symantec client security 1.1.1 mr6 b8.1.1.266
• symantec client security 1.1 stm b8.1.0.825a
• symantec client security 2.0
• symantec client security 2.0.1
• symantec client security 2.0.1 build 9.0.1.1000
• symantec client security 2.0.2
• symantec client security 2.0.2 build 9.0.2.1000
• symantec client security 2.0.3
• symantec client security 2.0.3 build 9.0.3.1000
• symantec client security 2.0 scf 7.1
• symantec client security 2.0 stm build 9.0.0.338
• symantec norton antivirus 8.1
• symantec norton antivirus 8.1.0.825a
• symantec norton antivirus 8.1.1
• symantec norton antivirus 8.1.1.319
• symantec norton antivirus 8.1.1.323
• symantec norton antivirus 8.1.1.329
• symantec norton antivirus 8.1.1.366
• symantec norton antivirus 8.1.1.377
• symantec norton antivirus 8.1.1 build8.1.1.314a
• symantec norton antivirus 8.1.1 build393
• symantec norton antivirus 8.01.434
• symantec norton antivirus 8.01.437
• symantec norton antivirus 8.01.446
• symantec norton antivirus 8.01.457
• symantec norton antivirus 8.01.460
• symantec norton antivirus 8.01.464
• symantec norton antivirus 8.01.471
• symantec norton antivirus 9.0.1
• symantec norton antivirus 9.0.1.1.1000
• symantec norton antivirus 9.0.1.1000
• symantec norton antivirus 9.0.2
• symantec norton antivirus 9.0.2.1000
References
- http://secunia.com/advisories/22536 secunia.com
- http://securitytracker.com/id?1017108 securitytracker.com
- http://securitytracker.com/id?1017109 securitytracker.com
- http://www.securityfocus.com/archive/1/449524/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20684 www.securityfocus.com
- http://www.symantec.com/avcenter/security/Content/2006.10.23.html Patch
- http://www.vupen.com/english/advisories/2006/4157 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29762 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/22536 secunia.com
- http://securitytracker.com/id?1017108 securitytracker.com
- http://securitytracker.com/id?1017109 securitytracker.com
- http://www.securityfocus.com/archive/1/449524/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20684 www.securityfocus.com
- http://www.symantec.com/avcenter/security/Content/2006.10.23.html Patch
- http://www.vupen.com/english/advisories/2006/4157 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29762 exchange.xforce.ibmcloud.com