PT-2006-4340 · Symantec · Symantec Antivirus Corporate Edition+2

Published 2006-10-23 · Updated 2018-10-18 · CVE-2006-3455

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:L/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Symantec AntiVirus Corporate Edition versions 8.1 through 9.0.3 Symantec Client Security versions 1.1 through 2.0.3

Description The issue allows local users to execute arbitrary code via a modified address for the output buffer argument to the DeviceIOControl function. This is related to the SAVRT.SYS device driver.

Recommendations For Symantec AntiVirus Corporate Edition versions 8.1 through 9.0.3, update to a version later than 9.0.3 to resolve the issue. For Symantec Client Security versions 1.1 through 2.0.3, update to a version later than 2.0.3 to resolve the issue. As a temporary workaround, consider restricting access to the DeviceIOControl function until a patch is available.

Fix

Related Identifiers

CVE-2006-3455

Affected Products

Savrt.Sys

Symantec Antivirus Corporate Edition

Symantec Client Security

References · 13

• http://symantec.com/avcenter/security/Content/2006.10.23.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-3455 · Security Note
• http://frsirt.com/english/advisories/2006/4157 · Note
• http://secunia.com/advisories/22536 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3455 · Note
• http://securityfocus.com/archive/1/449524/100/0/threaded · Note
• http://securitytracker.com/id?1017108 · Note
• http://xforce.iss.net/xforce/xfdb/29762 · Note
• http://vupen.com/english/advisories/2006/4157 · Note
• http://securityfocus.com/archive/1/archive/1/449524/100/0/threaded · Note
• http://securitytracker.com/id?1017109 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29762 · Note
• http://securityfocus.com/bid/20684 · Note