CVE-2006-4927
First published: Tue Oct 10 2006(Updated: )
The (a) NAVENG (NAVENG.SYS) and (b) NAVEX15 (NAVEX15.SYS) device drivers 20061.3.0.12 and later, as used in Symantec AntiVirus and security products, allow local users to gain privileges by overwriting critical system addresses using a crafted Irp to the IOCTL functions (1) 0x222AD3, (2) 0x222AD7, and (3) 0x222ADB.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Symantec Naveng Driver | ||
| Symantec Naveng Driver | ||
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.idefense.com/intelligence/vulnerabilities/display.php?id=417
- http://www.symantec.com/avcenter/security/Content/2006.10.05a.html
- http://www.securityfocus.com/bid/20360
- http://securitytracker.com/id?1016994
- http://securitytracker.com/id?1016995
- http://securitytracker.com/id?1016996
- http://securitytracker.com/id?1016997
- http://securitytracker.com/id?1016998
- http://securitytracker.com/id?1016999
- http://securitytracker.com/id?1017000
- http://securitytracker.com/id?1017001
- http://securitytracker.com/id?1017002
- http://secunia.com/advisories/22288
- http://www.kb.cert.org/vuls/id/946820
- http://securityreason.com/securityalert/1690
- http://www.vupen.com/english/advisories/2006/3928
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29360
- http://www.securityfocus.com/archive/1/447849/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2006-4927?
CVE-2006-4927 has a high severity rating due to the potential privilege escalation vulnerabilities it introduces.
How do I fix CVE-2006-4927?
To fix CVE-2006-4927, update your Symantec AntiVirus and security products to the latest version provided by Symantec.
Which software is affected by CVE-2006-4927?
CVE-2006-4927 affects the Symantec Naveng and Navex15 device drivers.
Can CVE-2006-4927 be exploited remotely?
CVE-2006-4927 is not remotely exploitable; it requires local access to the system.
What is the impact of CVE-2006-4927 on my system?
The impact of CVE-2006-4927 can lead to unauthorized privilege escalation, allowing local users to gain higher access rights.
- agent/references
- agent/type
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- agent/severity
- agent/description
- agent/remedy
- agent/weakness
- agent/author
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/event
- agent/tags
- vendor/symantec
- canonical/symantec naveng driver