CVE-2006-3455

The vulnerability CVE-2006-3455 affects the SAVRT.SYS device driver in Symantec AntiVirus Corporate Edition 8.1 and 9.0.x up to 9.0.3, and Symantec Client Security 1.1 and 2.0.x up to 2.0.3. A local attacker can execute arbitrary code by supplying a crafted address for the DeviceIOControl output ...

Symantec Device Driver Elevation of Privilege

SUMMARY Symantec was notified of a vulnerability in a device driver which, if successfully exploited, could allow a local attacker to execute arbitrary code with elevated privileges or to crash the system. Risk Impact Medium Remote | No ---|--- Local | Yes Authentication Required | Yes Exploit...