CVE-2007-3673

Symantec symtdi.sys before 7.0.0, as distributed in Symantec AntiVirus Corporate Edition 9 through 10.1 and Client Security 2.0 through 3.1, Norton AntiSpam 2005, and Norton AntiVirus, Internet Security, Personal Firewall, and System Works 2005 and 2006; allows local users to gain privileges via a crafted Interrupt Request Packet (Irp) in an IOCTL 0x83022323 request to \\symTDI\, which results in memory overwrite.

Affected products

Norton Antispam, Norton Antivirus, Norton Internet Security, Norton Personal Firewall, Norton Systemworks, Symantec Antivirus Corporate Edition, Symantec Client Security

Symantec Client Security

= 2.0, 3.0, 3.1

Symantec Norton Antispam

= 2005

Symantec Norton Antivirus

= 9.0, 9.0.0.338, 9.0.1, 9.0.1.1.1000, 9.0.1.1000, 9.0.2, 9.0.2.1000, 9.0.3.1000, 9.0.4, 9.0.5, 9.0.5.1100, 10.0, 10.1, 2005, 2006

Symantec Norton Internet Security

= 2005, 2006

Symantec Norton Personal Firewall

= 2005, 2006

Symantec Norton System Works

= 2005, 2006

Fix

Available

CVSS 2.0

6.9 MEDIUM

EPSS

1.1% (62th percentile)

NVD status

Modified

Published

2007-07-15