[email protected]CVE-2006-4802

HistorySep 14, 2006 - 10:07 p.m.

CVE-2006-4802

2006-09-1422:07:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-4802

symantec

antivirus

format string vulnerability

security advisory

nvd

7.3 High

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

25.6%

JSON

Format string vulnerability in the Real Time Virus Scan service in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allows local users to execute arbitrary code via an unspecified vector related to alert notification messages, a different vector than CVE-2006-3454, a “second format string vulnerability” as found by the vendor.

CPENameOperatorVersion
symantec:client_securitysymantec client securityeq1.0.1
symantec:client_securitysymantec client securityeq1.0.1_build_8.01.460
symantec:client_securitysymantec client securityeq1.0.1_build_8.01.446
symantec:client_securitysymantec client securityeq1.6
symantec:norton_antivirussymantec norton antiviruseq9.0.2
symantec:client_securitysymantec client securityeq2.0.4
symantec:client_securitysymantec client securityeq1.2
symantec:client_securitysymantec client securityeq1.1.1_mr1_build_8.1.1.314a
symantec:norton_antivirussymantec norton antiviruseq8.1.1.323
symantec:norton_antivirussymantec norton antiviruseq8.1.1_build8.1.1.314a

CPE	Name	Operator	Version
symantec:client_security	symantec client security	eq	1.0.1
symantec:client_security	symantec client security	eq	1.0.1_build_8.01.460
symantec:client_security	symantec client security	eq	1.0.1_build_8.01.446
symantec:client_security	symantec client security	eq	1.6
symantec:norton_antivirus	symantec norton antivirus	eq	9.0.2
symantec:client_security	symantec client security	eq	2.0.4
symantec:client_security	symantec client security	eq	1.2
symantec:client_security	symantec client security	eq	1.1.1_mr1_build_8.1.1.314a
symantec:norton_antivirus	symantec norton antivirus	eq	8.1.1.323
symantec:norton_antivirus	symantec norton antivirus	eq	8.1.1_build8.1.1.314a

Rows per page:

1-10 of 401

References

secunia.com/advisories/21884

securityresponse.symantec.com/avcenter/security/Content/2006.09.13.html

securitytracker.com/id?1016842

www.securityfocus.com/archive/1/446293/100/0/threaded

www.securityfocus.com/bid/19986

exchange.xforce.ibmcloud.com/vulnerabilities/28937

7.3 High

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

25.6%

JSON

Related for CVE-2006-4802

openvas1 debian1 symantec1 cve1 securityvulns1