CVE-2007-1476

CVSS V2 Low 1.9 CVSS V3 None
Description
The SymTDI device driver (SYMTDI.SYS) in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security 2005 and 2006, AntiVirus Corporate Edition 3.0.x through 10.1.x, and other Norton products, allows local users to cause a denial of service (system crash) by sending crafted data to the driver's \Device file, which triggers invalid memory access, a different vulnerability than CVE-2006-4855.
Overview
  • CVE ID
  • CVE-2007-1476
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Modified
  • Published Version
  • 2007-03-16T21:19:00
  • Last Modified Date
  • 2018-10-16T16:38:43
Weakness Enumerations
CWE URL
CWE-20 http://cwe.mitre.org/data/definitions/20.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:symantec:client_security:2.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:2.0:*:scf_7.1:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:2.0:build_9.0.0.338:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:2.0:build_9.0.0.338:stm:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:2.0.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:2.0.1_build_9.0.1.1000:mr1:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:2.0.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:2.0.2_build_9.0.2.1000:mr2:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:2.0.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:2.0.3_build_9.0.3.1000:mr3:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:2.0.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:2.0.4:mr4_build1000:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:2.0.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:2.0.5_build_1100:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:2.0.5_build_1100_mp1:mr5:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:2.0.6:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:2.0.6:mr6:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:2.0_scf_7.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:2.0_stm_build_9.0.0.338:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:2.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.0.0.359:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.0.1.1000:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.0.1.1001:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.0.1.1007:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.0.1.1008:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.0.1.1009:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.0.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.0.2.2000:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.0.2.2001:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.0.2.2002:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.0.2.2010:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.0.2.2011:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.0.2.2020:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.0.2.2021:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.1.0.396:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.1.0.401:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.1.394:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.1.396:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.1.400:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.1.401:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antispam:2005:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:3.0:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:9.0:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:9.0.0.338:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:9.0.1:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:9.0.1.1.1000:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:9.0.1.1000:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:9.0.2:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:9.0.2.1000:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:9.0.3.1000:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:9.0.4:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:9.0.5:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:9.0.5.1100:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:9.0.6.1000:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:10.0:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:10.0.1.1000:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:10.0.1.1007:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:10.0.1.1008:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:10.0.2.2000:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:10.0.2.2001:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:10.0.2.2002:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:10.0.2.2010:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:10.0.2.2011:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:10.0.2.2020:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:10.0.2.2021:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:10.1:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:10.1.4:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:10.1.4.4010:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:10.1.394:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:10.1.396:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:10.1.400:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:10.1.401:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:2005:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:2006:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_internet_security:2005:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_internet_security:2006:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_personal_firewall:*:*:*:*:*:*:*:* 1 OR 2006_9.1.1.7
cpe:2.3:a:symantec:norton_personal_firewall:2005:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_personal_firewall:2006:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_personal_firewall:2006_9.1.0.33:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_system_works:2005:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_system_works:2006:*:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:L/AC:M/Au:N/C:N/I:N/A:P
  • Access Vector
  • LOCAL
  • Access Compatibility
  • MEDIUM
  • Authentication
  • NONE
  • Confidentiality Impact
  • NONE
  • Integrity Impact
  • NONE
  • Availability Impact
  • PARTIAL
  • Base Score
  • 1.9
  • Severity
  • LOW
  • Exploitability Score
  • 3.4
  • Impact Score
  • 2.9
References
Reference URL Reference Tags
http://www.matousec.com/info/advisories/Norton-Insufficient-validation-of-SymTDI-driver-input-buffer.php Vendor Advisory
http://www.securityfocus.com/bid/22977
http://marc.info/?l=full-disclosure&m=117396596027148&w=2
http://www.symantec.com/avcenter/security/Content/2007.09.05.html
http://securitytracker.com/id?1018656
http://securityreason.com/securityalert/2438
http://osvdb.org/35088
https://exchange.xforce.ibmcloud.com/vulnerabilities/33003
http://www.securityfocus.com/archive/1/462926/100/0/threaded
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2007-1476
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1476
History
Created Old Value New Value Data Type Notes
2022-05-10 18:16:15 Added to TrackCVE