CVE-2007-3673 Symantec symtdi.sys before 7.0.0, as distributed in Symantec AntiVirus Corporate Edition 9 through 10.1 and Client Security 2.0 through 3.1, Norton AntiSpam 2005, and Norton AntiVirus, Internet Securi...
MediumCVSS 6.9
EPSS 1.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Symantec symtdi.sys before 7.0.0, as distributed in Symantec AntiVirus Corporate Edition 9 through 10.1 and Client Security 2.0 through 3.1, Norton AntiSpam 2005, and Norton AntiVirus, Internet Security, Personal Firewall, and System Works 2005 and 2006; allows local users to gain privileges via a crafted Interrupt Request Packet (Irp) in an IOCTL 0x83022323 request to \symTDI, which results in memory overwrite.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec client security | = 2.0 | No fix listed |
| symantec client security | = 3.0 | No fix listed |
| symantec client security | = 3.1 | No fix listed |
| symantec norton antispam | = 2005 | No fix listed |
| symantec norton antivirus | = 9.0 | No fix listed |
| symantec norton antivirus | = 9.0.0.338 | No fix listed |
| symantec norton antivirus | = 9.0.1 | No fix listed |
| symantec norton antivirus | = 9.0.1.1.1000 | No fix listed |
| symantec norton antivirus | = 9.0.1.1000 | No fix listed |
| symantec norton antivirus | = 9.0.2 | No fix listed |
| symantec norton antivirus | = 9.0.2.1000 | No fix listed |
| symantec norton antivirus | = 9.0.3.1000 | No fix listed |
| symantec norton antivirus | = 9.0.4 | No fix listed |
| symantec norton antivirus | = 9.0.5 | No fix listed |
| symantec norton antivirus | = 9.0.5.1100 | No fix listed |
| symantec norton antivirus | = 10.0 | No fix listed |
| symantec norton antivirus | = 10.1 | No fix listed |
| symantec norton antivirus | = 2005 | No fix listed |
| symantec norton antivirus | = 2006 | No fix listed |
| symantec norton internet security | = 2005 | No fix listed |
| symantec norton internet security | = 2006 | No fix listed |
| symantec norton personal firewall | = 2005 | No fix listed |
| symantec norton personal firewall | = 2006 | No fix listed |
| symantec norton system works | = 2005 | No fix listed |
| symantec norton system works | = 2006 | No fix listed |
References
- 20070711 Symantec AntiVirus symtdi.sys Local Privilege Escalation Vulnerability patch third-party-advisory
- 36117 vdb-entry
- 26042 third-party-advisory vendor-advisory
- securityresponse.symantec.com
- 1018372 vdb-entry
- 22351 exploit vdb-entry
- ADV-2007-2507 vdb-entry
- symantec-multi-symtdi-privilege-escalation(35347) vdb-entry