Symantec Antivirus privilege escalation

It's possible to overwrite system memory regions with IOCTL 0x83022323 of symTDI device...

CVE-2007-1476

The SymTDI device driver SYMTDI.SYS in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security 2005 and 2006, AntiVirus Corporate Edition 3.0.x through 10.1.x, and other Norton products, allows local users to cause a denial of service system crash by sending crafted data to...

CVE-2007-1476

The vulnerability CVE-2007-1476 affects the Symantec SYMTDI.SYS device driver in Norton products (Norton Personal Firewall 2006 9.1.1.7 and earlier; Internet Security 2005/2006; AntiVirus Corporate Edition 3.0.x–10.1.x) and related Norton products. A local attacker can cause a denial of service (...

Symantec Norton个人防火墙SymTDI驱动本地拒绝服务漏洞

Symantec Norton个人防火墙是非常流行的防火墙软件。 Norton个人防火墙的驱动实现上存在漏洞，本地攻击者可能利用此漏洞导致系统崩溃。 Norton个人防火墙没有充分地保护其\Device\SymEvent驱动，且没有验证输入缓冲区，因此本地攻击者可以打开这个驱动并发送被认为是有效的任意数据。当在输入缓冲区中重组数据时驱动可能会执行无效的内存操作，导致整个操作系统拒绝服务。 Symantec Norton Personal Firewall 2006 9.1.1.7 Symantec Norton Personal Firewall 2006 9.1.0.33 Symant...

[Full-disclosure] Norton Insufficient validation of 'SymTDI' driver input buffer

Hello, We would like to inform you about a vulnerability in Symantec Norton products. Description: Norton insufficiently protects its driver DeviceSymEvent against a manipulation by malicious applications and it fails to validate its input buffer. It is possible to open this driver and send...