Symantec SAVCE RTVScan Component Local Privilege Escalation (SYM07-017)

The remote installation of Symantec Antivirus Corporate Edition SAVCE or Symantec Client Security contains a flaw in the Real-Time scanner RTVScan component because it fails to drop its privileges with in a threat notification window. A local attacker may be able to leverage this flaw to elevate...

CVE-2007-3800

Summary : CVE-2007-3800 affects Symantec Antivirus Corporate Edition (9.0–10.1) and Symantec Client Security (2.0–3.1). The vulnerability lies in the Real-Time scanner RTVScan component where, if the Notification Message window is enabled, a local attacker can craft code to gain privileges. The c...