Norton Personal Firewall 2006 9.1.0.33 allows local users to cause a denial of service (crash) via certain RegSaveKey, RegRestoreKey and RegDeleteKey operations on the (1) HKLMSYSTEMCurrentControlSetServicesSNDSrvc and (2) HKLMSYSTEMCurrentControlSetServicesSymEvent registry keys.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Norton_personal_firewall | Symantec | 2006_9.1.0.33 (including) | 2006_9.1.0.33 (including) |
References
- http://securityreason.com/securityalert/1241
- http://www.matousec.com/info/advisories/Norton-Insufficient-protection-of-Norton-service-registry-keys.php
- http://www.securityfocus.com/archive/1/440110/100/0/threaded
- http://www.securityfocus.com/bid/18995
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27764
- http://securityreason.com/securityalert/1241
- http://www.matousec.com/info/advisories/Norton-Insufficient-protection-of-Norton-service-registry-keys.php
- http://www.securityfocus.com/archive/1/440110/100/0/threaded
- http://www.securityfocus.com/bid/18995
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27764