CVE-2007-3673

Symantec symtdi.sys before 7.0.0, as distributed in Symantec AntiVirus Corporate Edition 9 through 10.1 and Client Security 2.0 through 3.1, Norton AntiSpam 2005, and Norton AntiVirus, Internet Security, Personal Firewall, and System Works 2005 and 2006; allows local users to gain privileges via a crafted Interrupt Request Packet (Irp) in an IOCTL 0x83022323 request to \\symTDI\, which results in memory overwrite.

Score
CVSS 2.0 6.9 Medium
Status
Modified - cve@mitre.org
Published
2007-07-15
Last modified
2024-08-07

Affected products

References

 
 
© AVABIS GmbH privacypolicy about