CVE-2006-3455
Severity Score
4.3
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The SAVRT.SYS device driver, as used in Symantec AntiVirus Corporate Edition 8.1 and 9.0.x up to 9.0.3, and Symantec Client Security 1.1 and 2.0.x up to 2.0.3, allows local users to execute arbitrary code via a modified address for the output buffer argument to the DeviceIOControl function.
El controlador de dispositivo SAVRT.SYS, utilizado en Symantec AntiVirus Corporate Edition 8.1 y 9.0.x hasta 9.0.3, y en Symantec Client Security 1.1 y 2.0.x hasta 2.0.3, permite a usuarios locales ejecutar código de su elección mediante una dirección modificada para el argumento de búfer de salida en la función DeviceIOControl.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2006-07-07 CVE Reserved
- 2006-10-23 CVE Published
- 2024-03-17 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (8)
| URL | Tag | Source |
|---|---|---|
| http://secunia.com/advisories/22536 | Third Party Advisory | |
| http://securitytracker.com/id?1017108 | Vdb Entry | |
| http://securitytracker.com/id?1017109 | Vdb Entry | |
| http://www.securityfocus.com/archive/1/449524/100/0/threaded | Mailing List | |
| http://www.securityfocus.com/bid/20684 | Vdb Entry | |
| http://www.vupen.com/english/advisories/2006/4157 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/29762 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.symantec.com/avcenter/security/Content/2006.10.23.html | 2018-10-18 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 1.1 Search vendor "Symantec" for product "Client Security" and version "1.1" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 1.1.1 Search vendor "Symantec" for product "Client Security" and version "1.1.1" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 1.1.1_build_393 Search vendor "Symantec" for product "Client Security" and version "1.1.1_build_393" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 1.1.1_mr1_build_8.1.1.314a Search vendor "Symantec" for product "Client Security" and version "1.1.1_mr1_build_8.1.1.314a" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 1.1.1_mr2_build_8.1.1.319 Search vendor "Symantec" for product "Client Security" and version "1.1.1_mr2_build_8.1.1.319" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 1.1.1_mr3_build_8.1.1.323 Search vendor "Symantec" for product "Client Security" and version "1.1.1_mr3_build_8.1.1.323" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 1.1.1_mr4_build_8.1.1.329 Search vendor "Symantec" for product "Client Security" and version "1.1.1_mr4_build_8.1.1.329" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 1.1.1_mr5_build_8.1.1.336 Search vendor "Symantec" for product "Client Security" and version "1.1.1_mr5_build_8.1.1.336" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 1.1.1_mr6_b8.1.1.266 Search vendor "Symantec" for product "Client Security" and version "1.1.1_mr6_b8.1.1.266" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 1.1_stm_b8.1.0.825a Search vendor "Symantec" for product "Client Security" and version "1.1_stm_b8.1.0.825a" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 2.0 Search vendor "Symantec" for product "Client Security" and version "2.0" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 2.0.1 Search vendor "Symantec" for product "Client Security" and version "2.0.1" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 2.0.1_build_9.0.1.1000 Search vendor "Symantec" for product "Client Security" and version "2.0.1_build_9.0.1.1000" | mr1 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 2.0.2 Search vendor "Symantec" for product "Client Security" and version "2.0.2" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 2.0.2_build_9.0.2.1000 Search vendor "Symantec" for product "Client Security" and version "2.0.2_build_9.0.2.1000" | mr2 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 2.0.3 Search vendor "Symantec" for product "Client Security" and version "2.0.3" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 2.0.3_build_9.0.3.1000 Search vendor "Symantec" for product "Client Security" and version "2.0.3_build_9.0.3.1000" | mr3 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 2.0_scf_7.1 Search vendor "Symantec" for product "Client Security" and version "2.0_scf_7.1" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 2.0_stm_build_9.0.0.338 Search vendor "Symantec" for product "Client Security" and version "2.0_stm_build_9.0.0.338" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Norton Antivirus Search vendor "Symantec" for product "Norton Antivirus" | 8.1 Search vendor "Symantec" for product "Norton Antivirus" and version "8.1" | corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Norton Antivirus Search vendor "Symantec" for product "Norton Antivirus" | 8.1.0.825a Search vendor "Symantec" for product "Norton Antivirus" and version "8.1.0.825a" | corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Norton Antivirus Search vendor "Symantec" for product "Norton Antivirus" | 8.1.1 Search vendor "Symantec" for product "Norton Antivirus" and version "8.1.1" | corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Norton Antivirus Search vendor "Symantec" for product "Norton Antivirus" | 8.1.1.319 Search vendor "Symantec" for product "Norton Antivirus" and version "8.1.1.319" | corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Norton Antivirus Search vendor "Symantec" for product "Norton Antivirus" | 8.1.1.323 Search vendor "Symantec" for product "Norton Antivirus" and version "8.1.1.323" | corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Norton Antivirus Search vendor "Symantec" for product "Norton Antivirus" | 8.1.1.329 Search vendor "Symantec" for product "Norton Antivirus" and version "8.1.1.329" | corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Norton Antivirus Search vendor "Symantec" for product "Norton Antivirus" | 8.1.1.366 Search vendor "Symantec" for product "Norton Antivirus" and version "8.1.1.366" | corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Norton Antivirus Search vendor "Symantec" for product "Norton Antivirus" | 8.1.1.377 Search vendor "Symantec" for product "Norton Antivirus" and version "8.1.1.377" | corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Norton Antivirus Search vendor "Symantec" for product "Norton Antivirus" | 8.1.1_build8.1.1.314a Search vendor "Symantec" for product "Norton Antivirus" and version "8.1.1_build8.1.1.314a" | corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Norton Antivirus Search vendor "Symantec" for product "Norton Antivirus" | 8.1.1_build393 Search vendor "Symantec" for product "Norton Antivirus" and version "8.1.1_build393" | corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Norton Antivirus Search vendor "Symantec" for product "Norton Antivirus" | 8.01.434 Search vendor "Symantec" for product "Norton Antivirus" and version "8.01.434" | corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Norton Antivirus Search vendor "Symantec" for product "Norton Antivirus" | 8.01.437 Search vendor "Symantec" for product "Norton Antivirus" and version "8.01.437" | corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Norton Antivirus Search vendor "Symantec" for product "Norton Antivirus" | 8.01.446 Search vendor "Symantec" for product "Norton Antivirus" and version "8.01.446" | corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Norton Antivirus Search vendor "Symantec" for product "Norton Antivirus" | 8.01.457 Search vendor "Symantec" for product "Norton Antivirus" and version "8.01.457" | corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Norton Antivirus Search vendor "Symantec" for product "Norton Antivirus" | 8.01.460 Search vendor "Symantec" for product "Norton Antivirus" and version "8.01.460" | corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Norton Antivirus Search vendor "Symantec" for product "Norton Antivirus" | 8.01.464 Search vendor "Symantec" for product "Norton Antivirus" and version "8.01.464" | corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Norton Antivirus Search vendor "Symantec" for product "Norton Antivirus" | 8.01.471 Search vendor "Symantec" for product "Norton Antivirus" and version "8.01.471" | corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Norton Antivirus Search vendor "Symantec" for product "Norton Antivirus" | 9.0.1 Search vendor "Symantec" for product "Norton Antivirus" and version "9.0.1" | corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Norton Antivirus Search vendor "Symantec" for product "Norton Antivirus" | 9.0.1.1.1000 Search vendor "Symantec" for product "Norton Antivirus" and version "9.0.1.1.1000" | corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Norton Antivirus Search vendor "Symantec" for product "Norton Antivirus" | 9.0.1.1000 Search vendor "Symantec" for product "Norton Antivirus" and version "9.0.1.1000" | corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Norton Antivirus Search vendor "Symantec" for product "Norton Antivirus" | 9.0.2 Search vendor "Symantec" for product "Norton Antivirus" and version "9.0.2" | corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Norton Antivirus Search vendor "Symantec" for product "Norton Antivirus" | 9.0.2.1000 Search vendor "Symantec" for product "Norton Antivirus" and version "9.0.2.1000" | corporate |
Affected
| ||||||