CVE-2007-1476: Input Validation
First published: Fri Mar 16 2007(Updated: )
The SymTDI device driver (SYMTDI.SYS) in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security 2005 and 2006, AntiVirus Corporate Edition 3.0.x through 10.1.x, and other Norton products, allows local users to cause a denial of service (system crash) by sending crafted data to the driver's \Device file, which triggers invalid memory access, a different vulnerability than CVE-2006-4855.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Symantec Norton AntiVirus | =10.1 | |
| Symantec Client Security | =3.0 | |
| Symantec Client Security | =3.0.1.1009 | |
| Symantec Norton AntiVirus | =9.0.2.1000 | |
| Symantec Norton AntiVirus | =9.0.3.1000 | |
| Symantec Client Security | =2.0.6 | |
| Symantec Norton System Works | =2005 | |
| Symantec Client Security | =3.0.2.2020 | |
| Symantec Client Security | =2.0.6-mr6 | |
| Symantec Client Security | =2.1 | |
| Symantec Norton AntiVirus | =10.1.400 | |
| Symantec Client Security | =2.0-build_9.0.0.338 | |
| Symantec Client Security | =3.0.2.2021 | |
| Symantec Client Security | =2.0.1_build_9.0.1.1000-mr1 | |
| Symantec Norton AntiVirus | =9.0.6.1000 | |
| Symantec Client Security | =2.0.3_build_9.0.3.1000-mr3 | |
| Symantec Norton AntiVirus | =9.0.2 | |
| Symantec Norton AntiVirus | =10.0.2.2011 | |
| Symantec Norton AntiVirus | =10.0.2.2010 | |
| Symantec Client Security | =3.0.1.1000 | |
| Symantec Norton Personal Firewall | <=2006_9.1.1.7 | |
| Symantec Client Security | =2.0.4 | |
| Symantec Norton AntiVirus | =10.0 | |
| Symantec Norton AntiVirus | =10.0.1.1000 | |
| Symantec Norton AntiVirus | =10.1.401 | |
| Symantec Client Security | =3.1.0.401 | |
| Symantec Client Security | =3.0.2.2002 | |
| Symantec Client Security | =3.0.1.1008 | |
| Symantec Norton AntiVirus | =9.0.1.1.1000 | |
| Symantec Norton System Works | =2006 | |
| Symantec Client Security | =2.0.5_build_1100 | |
| Symantec Client Security | =3.0.2.2011 | |
| Symantec Norton AntiVirus | =9.0.5.1100 | |
| Symantec Client Security | =2.0.4-mr4_build1000 | |
| Symantec Norton Personal Firewall | =2006_9.1.0.33 | |
| Symantec Client Security | =3.0.2 | |
| Symantec Client Security | =3.1.396 | |
| Symantec Norton AntiVirus | =10.1.394 | |
| Symantec Norton AntiVirus | =10.0.2.2001 | |
| Symantec Norton AntiVirus | =9.0.1 | |
| Symantec Client Security | =2.0 | |
| Symantec Norton AntiVirus | =9.0.1.1000 | |
| Symantec Client Security | =2.0.5_build_1100_mp1-mr5 | |
| Symantec Norton AntiVirus | =10.0.1.1007 | |
| Symantec Client Security | =2.0.5 | |
| Symantec Norton AntiVirus | =10.0.2.2020 | |
| Symantec Client Security | =3.0.1.1001 | |
| Symantec Client Security | =3.0.2.2001 | |
| Symantec Norton Antispam | =2005 | |
| Symantec Norton AntiVirus | =10.1.396 | |
| Symantec Norton AntiVirus | =9.0.4 | |
| Symantec Norton AntiVirus | =2006 | |
| Symantec Client Security | =2.0-build_9.0.0.338 | |
| Symantec Norton AntiVirus | =10.1.4 | |
| Symantec Norton AntiVirus | =9.0.0.338 | |
| Symantec Norton Personal Firewall | =2005 | |
| Symantec Client Security | =2.0 | |
| Symantec Client Security | =2.0.3 | |
| Symantec Norton Personal Firewall | =2006 | |
| Symantec Client Security | =3.1.401 | |
| Symantec Norton AntiVirus | =10.0.2.2000 | |
| Symantec Client Security | =3.0.0.359 | |
| Symantec Norton Internet Security | =2006 | |
| Symantec Client Security | =3.1.400 | |
| Symantec Client Security | =3.0.2.2010 | |
| Symantec Client Security | =2.0_scf_7.1 | |
| Symantec Client Security | =3.1 | |
| Symantec Norton AntiVirus | =2005 | |
| Symantec Client Security | =3.1.0.396 | |
| Symantec Client Security | =3.0.2.2000 | |
| Symantec Client Security | =3.1.394 | |
| Symantec Norton Internet Security | =2005 | |
| Symantec Norton AntiVirus | =10.0.2.2021 | |
| Symantec Norton AntiVirus | =9.0 | |
| Symantec Norton AntiVirus | =3.0 | |
| Symantec Client Security | =3.0.1.1007 | |
| Symantec Client Security | =2.0.2 | |
| Symantec Norton AntiVirus | =9.0.5 | |
| Symantec Client Security | =2.0_stm_build_9.0.0.338 | |
| Symantec Norton AntiVirus | =10.0.1.1008 | |
| Symantec Client Security | =2.0.1 | |
| Symantec Norton AntiVirus | =10.1.4.4010 | |
| Symantec Norton AntiVirus | =10.0.2.2002 | |
| Symantec Client Security | =2.0.2_build_9.0.2.1000-mr2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.matousec.com/info/advisories/Norton-Insufficient-validation-of-SymTDI-driver-input-buffer.php
- http://www.securityfocus.com/bid/22977
- http://marc.info/?l=full-disclosure&m=117396596027148&w=2
- http://www.symantec.com/avcenter/security/Content/2007.09.05.html
- http://securitytracker.com/id?1018656
- http://securityreason.com/securityalert/2438
- http://osvdb.org/35088
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33003
- http://www.securityfocus.com/archive/1/462926/100/0/threaded
- collector/nvd-historical
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/description
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/symantec
- canonical/symantec norton antivirus
- version/symantec norton antivirus/10.1
- canonical/symantec client security
- version/symantec client security/3.0
- version/symantec client security/3.0.1.1009
- version/symantec norton antivirus/9.0.2.1000
- version/symantec norton antivirus/9.0.3.1000
- version/symantec client security/2.0.6
- canonical/symantec norton system works
- version/symantec norton system works/2005
- version/symantec client security/3.0.2.2020
- version/symantec client security/2.0.6-mr6
- version/symantec client security/2.1
- version/symantec norton antivirus/10.1.400
- version/symantec client security/2.0-build_9.0.0.338
- version/symantec client security/3.0.2.2021
- version/symantec client security/2.0.1_build_9.0.1.1000-mr1
- version/symantec norton antivirus/9.0.6.1000
- version/symantec client security/2.0.3_build_9.0.3.1000-mr3
- version/symantec norton antivirus/9.0.2
- version/symantec norton antivirus/10.0.2.2011
- version/symantec norton antivirus/10.0.2.2010
- version/symantec client security/3.0.1.1000
- canonical/symantec norton personal firewall
- version/symantec norton personal firewall/2006_9.1.1.7
- version/symantec client security/2.0.4
- version/symantec norton antivirus/10.0
- version/symantec norton antivirus/10.0.1.1000
- version/symantec norton antivirus/10.1.401
- version/symantec client security/3.1.0.401
- version/symantec client security/3.0.2.2002
- version/symantec client security/3.0.1.1008
- version/symantec norton antivirus/9.0.1.1.1000
- version/symantec norton system works/2006
- version/symantec client security/2.0.5_build_1100
- version/symantec client security/3.0.2.2011
- version/symantec norton antivirus/9.0.5.1100
- version/symantec client security/2.0.4-mr4_build1000
- version/symantec norton personal firewall/2006_9.1.0.33
- version/symantec client security/3.0.2
- version/symantec client security/3.1.396
- version/symantec norton antivirus/10.1.394
- version/symantec norton antivirus/10.0.2.2001
- version/symantec norton antivirus/9.0.1
- version/symantec client security/2.0
- version/symantec norton antivirus/9.0.1.1000
- version/symantec client security/2.0.5_build_1100_mp1-mr5
- version/symantec norton antivirus/10.0.1.1007
- version/symantec client security/2.0.5
- version/symantec norton antivirus/10.0.2.2020
- version/symantec client security/3.0.1.1001
- version/symantec client security/3.0.2.2001
- canonical/symantec norton antispam
- version/symantec norton antispam/2005
- version/symantec norton antivirus/10.1.396
- version/symantec norton antivirus/9.0.4
- version/symantec norton antivirus/2006
- version/symantec norton antivirus/10.1.4
- version/symantec norton antivirus/9.0.0.338
- version/symantec norton personal firewall/2005
- version/symantec client security/2.0.3
- version/symantec norton personal firewall/2006
- version/symantec client security/3.1.401
- version/symantec norton antivirus/10.0.2.2000
- version/symantec client security/3.0.0.359
- canonical/symantec norton internet security
- version/symantec norton internet security/2006
- version/symantec client security/3.1.400
- version/symantec client security/3.0.2.2010
- version/symantec client security/2.0_scf_7.1
- version/symantec client security/3.1
- version/symantec norton antivirus/2005
- version/symantec client security/3.1.0.396
- version/symantec client security/3.0.2.2000
- version/symantec client security/3.1.394
- version/symantec norton internet security/2005
- version/symantec norton antivirus/10.0.2.2021
- version/symantec norton antivirus/9.0
- version/symantec norton antivirus/3.0
- version/symantec client security/3.0.1.1007
- version/symantec client security/2.0.2
- version/symantec norton antivirus/9.0.5
- version/symantec client security/2.0_stm_build_9.0.0.338
- version/symantec norton antivirus/10.0.1.1008
- version/symantec client security/2.0.1
- version/symantec norton antivirus/10.1.4.4010
- version/symantec norton antivirus/10.0.2.2002
- version/symantec client security/2.0.2_build_9.0.2.1000-mr2