CVE Vulnerabilities

CVE-2007-3673

Published: Jul 15, 2007 | Modified: Jul 29, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.9 MEDIUM
AV:L/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Symantec symtdi.sys before 7.0.0, as distributed in Symantec AntiVirus Corporate Edition 9 through 10.1 and Client Security 2.0 through 3.1, Norton AntiSpam 2005, and Norton AntiVirus, Internet Security, Personal Firewall, and System Works 2005 and 2006; allows local users to gain privileges via a crafted Interrupt Request Packet (Irp) in an IOCTL 0x83022323 request to symTDI, which results in memory overwrite.

Affected Software

Name Vendor Start Version End Version
Client_security Symantec 2.0 (including) 2.0 (including)
Client_security Symantec 3.0 (including) 3.0 (including)
Client_security Symantec 3.1 (including) 3.1 (including)
Norton_antispam Symantec 2005 (including) 2005 (including)
Norton_antivirus Symantec 9.0 (including) 9.0 (including)
Norton_antivirus Symantec 9.0.0.338 (including) 9.0.0.338 (including)
Norton_antivirus Symantec 9.0.1 (including) 9.0.1 (including)
Norton_antivirus Symantec 9.0.1.1.1000 (including) 9.0.1.1.1000 (including)
Norton_antivirus Symantec 9.0.1.1000 (including) 9.0.1.1000 (including)
Norton_antivirus Symantec 9.0.2 (including) 9.0.2 (including)
Norton_antivirus Symantec 9.0.2.1000 (including) 9.0.2.1000 (including)
Norton_antivirus Symantec 9.0.3.1000 (including) 9.0.3.1000 (including)
Norton_antivirus Symantec 9.0.4 (including) 9.0.4 (including)
Norton_antivirus Symantec 9.0.5 (including) 9.0.5 (including)
Norton_antivirus Symantec 9.0.5.1100 (including) 9.0.5.1100 (including)
Norton_antivirus Symantec 10.0 (including) 10.0 (including)
Norton_antivirus Symantec 10.1 (including) 10.1 (including)
Norton_antivirus Symantec 2005 (including) 2005 (including)
Norton_antivirus Symantec 2006 (including) 2006 (including)
Norton_internet_security Symantec 2005 (including) 2005 (including)
Norton_internet_security Symantec 2006 (including) 2006 (including)
Norton_personal_firewall Symantec 2005 (including) 2005 (including)
Norton_personal_firewall Symantec 2006 (including) 2006 (including)
Norton_system_works Symantec 2005 (including) 2005 (including)
Norton_system_works Symantec 2006 (including) 2006 (including)

References