CVE-2006-1836: Medium severity Symantec LiveUpdate vulnerability
Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which allows local users to gain privileges via a Trojan horse program.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2006-1836?
The severity of CVE-2006-1836 is considered to be high due to the potential for local privilege escalation.
How do I fix CVE-2006-1836?
To fix CVE-2006-1836, users should upgrade to a patched version of Symantec LiveUpdate or relevant products that eliminate the untrusted search path vulnerability.
Which Symantec products are affected by CVE-2006-1836?
Affected products include Symantec LiveUpdate versions 3.0.0 through 3.5.0 and several versions of Norton Antivirus and Norton Internet Security for Macintosh.
Can a local user exploit CVE-2006-1836?
Yes, a local user can exploit CVE-2006-1836 to gain elevated privileges through a Trojan horse program.
Is CVE-2006-1836 specific to Windows or Macintosh?
CVE-2006-1836 is specifically a vulnerability present in versions of Symantec products for Macintosh.