CVE-2007-1476 The SymTDI device driver (SYMTDI.SYS) in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security 2005 and 2006, AntiVirus Corporate Edition 3.0.x through 10.1.x, and other Norton...
LowCVSS 1.9
EPSS 0.89%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The SymTDI device driver (SYMTDI.SYS) in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security 2005 and 2006, AntiVirus Corporate Edition 3.0.x through 10.1.x, and other Norton products, allows local users to cause a denial of service (system crash) by sending crafted data to the driver's \Device file, which triggers invalid memory access, a different vulnerability than CVE-2006-4855.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec client security | = 2.0 | No fix listed |
| symantec client security | = 2.0-build_9.0.0.338 | No fix listed |
| symantec client security | = 2.0.1 | No fix listed |
| symantec client security | = 2.0.1_build_9.0.1.1000-mr1 | No fix listed |
| symantec client security | = 2.0.2 | No fix listed |
| symantec client security | = 2.0.2_build_9.0.2.1000-mr2 | No fix listed |
| symantec client security | = 2.0.3 | No fix listed |
| symantec client security | = 2.0.3_build_9.0.3.1000-mr3 | No fix listed |
| symantec client security | = 2.0.4 | No fix listed |
| symantec client security | = 2.0.4-mr4_build1000 | No fix listed |
| symantec client security | = 2.0.5 | No fix listed |
| symantec client security | = 2.0.5_build_1100 | No fix listed |
| symantec client security | = 2.0.5_build_1100_mp1-mr5 | No fix listed |
| symantec client security | = 2.0.6 | No fix listed |
| symantec client security | = 2.0.6-mr6 | No fix listed |
| symantec client security | = 2.0_scf_7.1 | No fix listed |
| symantec client security | = 2.0_stm_build_9.0.0.338 | No fix listed |
| symantec client security | = 2.1 | No fix listed |
| symantec client security | = 3.0 | No fix listed |
| symantec client security | = 3.0.0.359 | No fix listed |
| symantec client security | = 3.0.1.1000 | No fix listed |
| symantec client security | = 3.0.1.1001 | No fix listed |
| symantec client security | = 3.0.1.1007 | No fix listed |
| symantec client security | = 3.0.1.1008 | No fix listed |
| symantec client security | = 3.0.1.1009 | No fix listed |
Show 57 more
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec client security | = 3.0.2 | No fix listed |
| symantec client security | = 3.0.2.2000 | No fix listed |
| symantec client security | = 3.0.2.2001 | No fix listed |
| symantec client security | = 3.0.2.2002 | No fix listed |
| symantec client security | = 3.0.2.2010 | No fix listed |
| symantec client security | = 3.0.2.2011 | No fix listed |
| symantec client security | = 3.0.2.2020 | No fix listed |
| symantec client security | = 3.0.2.2021 | No fix listed |
| symantec client security | = 3.1 | No fix listed |
| symantec client security | = 3.1.0.396 | No fix listed |
| symantec client security | = 3.1.0.401 | No fix listed |
| symantec client security | = 3.1.394 | No fix listed |
| symantec client security | = 3.1.396 | No fix listed |
| symantec client security | = 3.1.400 | No fix listed |
| symantec client security | = 3.1.401 | No fix listed |
| symantec norton antispam | = 2005 | No fix listed |
| symantec norton antivirus | = 3.0 | No fix listed |
| symantec norton antivirus | = 9.0 | No fix listed |
| symantec norton antivirus | = 9.0.0.338 | No fix listed |
| symantec norton antivirus | = 9.0.1 | No fix listed |
| symantec norton antivirus | = 9.0.1.1.1000 | No fix listed |
| symantec norton antivirus | = 9.0.1.1000 | No fix listed |
| symantec norton antivirus | = 9.0.2 | No fix listed |
| symantec norton antivirus | = 9.0.2.1000 | No fix listed |
| symantec norton antivirus | = 9.0.3.1000 | No fix listed |
| symantec norton antivirus | = 9.0.4 | No fix listed |
| symantec norton antivirus | = 9.0.5 | No fix listed |
| symantec norton antivirus | = 9.0.5.1100 | No fix listed |
| symantec norton antivirus | = 9.0.6.1000 | No fix listed |
| symantec norton antivirus | = 10.0 | No fix listed |
| symantec norton antivirus | = 10.0.1.1000 | No fix listed |
| symantec norton antivirus | = 10.0.1.1007 | No fix listed |
| symantec norton antivirus | = 10.0.1.1008 | No fix listed |
| symantec norton antivirus | = 10.0.2.2000 | No fix listed |
| symantec norton antivirus | = 10.0.2.2001 | No fix listed |
| symantec norton antivirus | = 10.0.2.2002 | No fix listed |
| symantec norton antivirus | = 10.0.2.2010 | No fix listed |
| symantec norton antivirus | = 10.0.2.2011 | No fix listed |
| symantec norton antivirus | = 10.0.2.2020 | No fix listed |
| symantec norton antivirus | = 10.0.2.2021 | No fix listed |
| symantec norton antivirus | = 10.1 | No fix listed |
| symantec norton antivirus | = 10.1.4 | No fix listed |
| symantec norton antivirus | = 10.1.4.4010 | No fix listed |
| symantec norton antivirus | = 10.1.394 | No fix listed |
| symantec norton antivirus | = 10.1.396 | No fix listed |
| symantec norton antivirus | = 10.1.400 | No fix listed |
| symantec norton antivirus | = 10.1.401 | No fix listed |
| symantec norton antivirus | = 2005 | No fix listed |
| symantec norton antivirus | = 2006 | No fix listed |
| symantec norton internet security | = 2005 | No fix listed |
| symantec norton internet security | = 2006 | No fix listed |
| symantec norton personal firewall | <= 2006_9.1.1.7 | No fix listed |
| symantec norton personal firewall | = 2005 | No fix listed |
| symantec norton personal firewall | = 2006 | No fix listed |
| symantec norton personal firewall | = 2006_9.1.0.33 | No fix listed |
| symantec norton system works | = 2005 | No fix listed |
| symantec norton system works | = 2006 | No fix listed |
References
- 20070315 Norton Insufficient validation of 'SymTDI' driver mailing-list
- 35088 vdb-entry
- 2438 third-party-advisory
- 1018656 vdb-entry
- www.matousec.com vendor-advisory
- 20070315 Norton Insufficient validation of 'SymTDI' driver input buffer mailing-list
- 22977 vdb-entry
- www.symantec.com
- symantec-firewall-symtdi-dos(33003) vdb-entry