CVE-2006-3455

Severity

43%

Complexity

31%

Confidentiality

106%

The SAVRT.SYS device driver, as used in Symantec AntiVirus Corporate Edition 8.1 and 9.0.x up to 9.0.3, and Symantec Client Security 1.1 and 2.0.x up to 2.0.3, allows local users to execute arbitrary code via a modified address for the output buffer argument to the DeviceIOControl function.

The SAVRT.SYS device driver, as used in Symantec AntiVirus Corporate Edition 8.1 and 9.0.x up to 9.0.3, and Symantec Client Security 1.1 and 2.0.x up to 2.0.3, allows local users to execute arbitrary code via a modified address for the output buffer argument to the DeviceIOControl function.

CVSS 2.0 Base Score 4.3. CVSS Attack Vector: local. CVSS Attack Complexity: low. CVSS Vector: (AV:L/AC:L/Au:S/C:P/I:P/A:P).

Overview

Type

Symantec

First reported 18 years ago

2006-10-23 20:07:00

Last updated 6 years ago

2018-10-18 16:47:00

Affected Software

Symantec Symantec Client Security 1.1.1

1.1.1

Symantec Client Security 1.1.1 MR1 Build 8.1.1.314a

1.1.1_mr1_build_8.1.1.314a

Symantec Client Security 1.1.1 MR2 Build 8.1.1.319

1.1.1_mr2_build_8.1.1.319

Symantec Client Security 1.1.1 MR3 Build 8.1.1.323

1.1.1_mr3_build_8.1.1.323

Symantec Client Security 1.1.1 MR4 Build 8.1.1.329

1.1.1_mr4_build_8.1.1.329

Symantec Client Security 1.1.1 MR5 Build 8.1.1.336

1.1.1_mr5_build_8.1.1.336

Symantec Client Security 2.0

2.0

Symantec Client Security 2.0.1

2.0.1

Symantec Client Security 2.0.1 MR1_b9.0.1.1000

2.0.1_build_9.0.1.1000

Symantec Client Security 2.0.2

2.0.2

Symantec Client Security 2.0.2 MR2_b9.0.2.1000

2.0.2_build_9.0.2.1000

Symantec Client Security 2.0.3

2.0.3

Symantec Client Security 2.0.3 MR3_b9.0.3.1000

2.0.3_build_9.0.3.1000

Symantec Norton Antivirus 8.1.1.319 Corporate Edition

8.1.1.319

Symantec Norton Antivirus 8.1.1.323 Corporate Edition

8.1.1.323

Symantec Norton Antivirus 8.1.1.329 Corporate Edition

8.1.1.329

Symantec Norton Antivirus 8.1.1 Build8.1.1.314a Corporate Edition

8.1.1_build8.1.1.314a

Symantec Norton Antivirus 8.01.434 Corporate Edition

8.01.434

Symantec Norton Antivirus 8.01.437 Corporate Edition

8.01.437

Symantec Norton Antivirus 8.01.446 Corporate Edition

8.01.446

Symantec Norton Antivirus 8.01.457 Corporate Edition

8.01.457

Symantec Norton Antivirus 8.01.460 Corporate Edition

8.01.460

Symantec Norton Antivirus 8.01.464 Corporate Edition

8.01.464

Symantec Norton Antivirus 8.01.471 Corporate Edition

8.01.471

References

22536

1017108

1017109

20061023 Symantec Product Security: Symantec Device Driver Elevation of Privileg

20684

http://www.symantec.com/avcenter/security/Content/2006.10.23.html

Patch

ADV-2006-4157

symantec-savrt-privilege-escalation(29762)

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.