CVE-2003-1310

The DeviceIoControl function in the Norton Device Driver NAVAP.sys in Symantec Norton AntiVirus 2002 allows local users to gain privileges by overwriting memory locations via certain control codes aka "Device Driver Attack"...

Symantec Norton个人防火墙SymEvent驱动本地拒绝服务漏洞

Symantec Norton个人防火墙是非常流行的防火墙软件。 Symantec Norton个人防火墙的实现上存在漏洞，本地攻击者可能利用此漏洞对系统执行拒绝服务攻击。 Norton没有充分地保护 \Device\SymEvent 驱动，也没有验证其输入缓冲区，允许Everyone向这个驱动中写入数据，可能导致驱动执行无效的内存操作以及整个操作系统崩溃。 Symantec Norton Personal Firewall 2006 9.1.0.33 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

CVE-2006-5404

CVE-2006-5404 involves an unspecified vulnerability in an ActiveX control used by the Symantec Automated Support Assistant, deployed in Norton AntiVirus, Internet Security, and System Works 2005/2006. The vulnerability allows user‑assisted remote attackers to obtain sensitive information via unsp...

[Reversemode Advisory] Symantec Antivirus Engine Privilege Escalation

Symantec Antivirus Engine is prone to a local privilege escalation vulnerability. Two Device Drivers are affected: NAVEX15.sys, NAVENG.sys. NAVEX15.sys LOW CONSTANT VALUE PAGE:0004B611 sub edx, 222AD3h PAGE:0004B617 push esi PAGE:0004B618 jz short loc4B63C loc4B63C: mov edx, ecx+3Ch PAGE:0004B63F...

Symantec: SymEvent Driver Local Access System Denial of Service

SUMMARY A local access denial of service DoS issue has been identified in the Symantec SymEvent driver used in Symantec consumer and corporate/enterprise products listed below. A local user with authorized access to the targeted system can initiate a DoS in the affected Symantec application...

CVE-2006-4855

The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0, and 10.1,...

CVE-2006-4855

The CVE-2006-4855 family concerns the Symantec Norton products (Norton Personal Firewall 2006 9.1.0.33 and related Norton Personal Firewall/Internet Security/AntiVirus/Symantec client products; Symantec Host) where the \Device\SymEvent driver (and related SYMTDI.SYS) is vulnerable to local privil...

Symantec Norton Insufficient validation of 'SymEvent' driver input buffer

Hello, I would like to inform you about a vulnerability in Norton Personal Firewall. Description: Norton insufficiently protects its driver 'DeviceSymEvent' against a manipulation by malicious applications and it fails to validate its input buffer. It is possible to open this driver and send...

Symantec AntiVirus - IOCTL Kernel Privilege Escalation (1)

Symantec AntiVirus - IOCTL Kernel Privilege Escalation 1 / source: https://www.securityfocus.com/bid/20360/info Symantec AntiVirus is prone to a privilege-escalation vulnerability. Local attackers can exploit this issue to corrupt memory and execute arbitrary code with kernel-level privileges...

Symantec AntiVirus - IOCTL Kernel Privilege Escalation (2)

Symantec AntiVirus - IOCTL Kernel Privilege Escalation 2 // source: https://www.securityfocus.com/bid/20360/info // Symantec AntiVirus is prone to a privilege-escalation vulnerability. // Local attackers can exploit this issue to corrupt memory and execute arbitrary code with kernel-level...

Symantec AntiVirus - IOCTL Kernel Privilege Escalation (1)

/ source: https://www.securityfocus.com/bid/20360/info Symantec AntiVirus is prone to a privilege-escalation vulnerability. Local attackers can exploit this issue to corrupt memory and execute arbitrary code with kernel-level privileges. Successful exploits may facilitate a complete system...

CVE-2006-4266

Symantec Norton Personal Firewall 2006 9.1.0.33, and possibly earlier, does not properly protect Norton registry keys, which allows local users to provide Trojan horse libraries to Norton by using RegSaveKey and RegRestoreKey to modify HKLM\SOFTWARE\Symantec\CCPD\SuiteOwners, as demonstrated usin...

CVE-2006-4266

CVE-2006-4266 affects Norton Personal Firewall 2006 (at least 9.1.0.33) where the product does not adequately protect Norton registry keys. The issue allows a local attacker to influence Norton by using RegSaveKey/RegRestoreKey to modify HKLM\SOFTWARE\Symantec\CCPD\SuiteOwners (demonstrated with ...

Dove gray modified feature free kill mccafé and Norton 8. 0 Enterprise Edition-vulnerability warning-the black bar safety net

Today the rare is I in the school room and RUB into the machine, installed Norton and wheat coffee. Anyway, haven't for these two antivirus ever madefree kill, so just change it for the better. The positioning process on a free, given the feature code location: Norton: the starting offset 000B9A4...

CVE-2006-3725

Norton Personal Firewall 2006 9.1.0.33 allows local users to cause a denial of service crash via certain RegSaveKey, RegRestoreKey and RegDeleteKey operations on the 1 HKLM\SYSTEM\CurrentControlSet\Services\SNDSrvc and 2 HKLM\SYSTEM\CurrentControlSet\Services\SymEvent registry keys...

CVE-2006-3725

Norton Personal Firewall 2006 9.1.0.33 allows local users to cause a denial of service crash via certain RegSaveKey, RegRestoreKey and RegDeleteKey operations on the 1 HKLM\SYSTEM\CurrentControlSet\Services\SNDSrvc and 2 HKLM\SYSTEM\CurrentControlSet\Services\SymEvent registry keys...

CVE-2006-3725

Norton Personal Firewall 2006 9.1.0.33 allows local users to cause a denial of service (crash) by performing certain RegSaveKey, RegRestoreKey, and RegDeleteKey operations on the registry keys HKLM\SYSTEM\CurrentControlSet\Services\SNDSrvc and HKLM\SYSTEM\CurrentControlSet\Services\SymEvent. This...

Norton Antivirus DoS

Antivirus crash on scanning malformed PE files...

Design/Logic Flaw

Symantec Norton SystemWorks and SystemWorks Premier 2005 and 2006 stores temporary copies of files in the Norton Protected Recycle Bin NProtect directory, which is hidden from the FindFirst and FindNext Windows APIs and allows remote attackers to hide arbitrary files from virus scanners and other...

CVE-2006-0166

Symantec Norton SystemWorks and SystemWorks Premier 2005 and 2006 stores temporary copies of files in the Norton Protected Recycle Bin NProtect directory, which is hidden from the FindFirst and FindNext Windows APIs and allows remote attackers to hide arbitrary files from virus scanners and other...