Lucene search

[email protected]CVE-2006-3454

HistorySep 14, 2006 - 12:07 a.m.

CVE-2006-3454

2006-09-1400:07:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

symantec

antivirus

format string

vulnerabilities

cve-2006-3454

nvd

7.5 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

9.2%

JSON

Multiple format string vulnerabilities in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allow local users to execute arbitrary code via format strings in (1) Tamper Protection and (2) Virus Alert Notification messages.

CPENameOperatorVersion
symantec:client_securitysymantec client securityeq3.0
symantec:client_securitysymantec client securityeq1.0.1
symantec:norton_antivirussymantec norton antiviruseq9.0.2
symantec:client_securitysymantec client securityeq2.0.4
symantec:norton_antivirussymantec norton antiviruseq10.0
symantec:client_securitysymantec client securityeq1.1.1
symantec:norton_antivirussymantec norton antiviruseq9.0.1
symantec:client_securitysymantec client securityeq1.1
symantec:client_securitysymantec client securityeq2.0
symantec:client_securitysymantec client securityeq2.0.3

CPE	Name	Operator	Version
symantec:client_security	symantec client security	eq	3.0
symantec:client_security	symantec client security	eq	1.0.1
symantec:norton_antivirus	symantec norton antivirus	eq	9.0.2
symantec:client_security	symantec client security	eq	2.0.4
symantec:norton_antivirus	symantec norton antivirus	eq	10.0
symantec:client_security	symantec client security	eq	1.1.1
symantec:norton_antivirus	symantec norton antivirus	eq	9.0.1
symantec:client_security	symantec client security	eq	1.1
symantec:client_security	symantec client security	eq	2.0
symantec:client_security	symantec client security	eq	2.0.3

Rows per page:

1-10 of 151

References

layereddefense.com/SAV13SEPT.html

secunia.com/advisories/21884

securityresponse.symantec.com/avcenter/security/Content/2006.09.13.html

securitytracker.com/id?1016842

www.securityfocus.com/archive/1/446041/100/0/threaded

www.securityfocus.com/archive/1/446293/100/0/threaded

www.securityfocus.com/bid/19986

www.vupen.com/english/advisories/2006/3599

exchange.xforce.ibmcloud.com/vulnerabilities/28936

7.5 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

9.2%

JSON

Related for CVE-2006-3454

symantec1 securityvulns1 cve1