CVE-2003-1310 The DeviceIoControl function in the Norton Device Driver (NAVAP.sys) in Symantec Norton AntiVirus 2002 allows local users to gain privileges by overwriting memory locations via certain control codes (...
MediumCVSS 4.6
EPSS 1.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The DeviceIoControl function in the Norton Device Driver (NAVAP.sys) in Symantec Norton AntiVirus 2002 allows local users to gain privileges by overwriting memory locations via certain control codes (aka "Device Driver Attack").
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec norton antivirus | = 2002 | No fix listed |
| symantec norton antivirus | = 2003 | No fix listed |
References
- sec-labs.hack.pl
- 9460 third-party-advisory vendor-advisory
- 4362 vdb-entry
- 8329 exploit vdb-entry
- device-driver-gain-privileges(12824) vdb-entry