CVE-2007-3673: Medium severity Symantec Norton Antivirus vulnerability
Symantec symtdi.sys before 7.0.0, as distributed in Symantec AntiVirus Corporate Edition 9 through 10.1 and Client Security 2.0 through 3.1, Norton AntiSpam 2005, and Norton AntiVirus, Internet Security, Personal Firewall, and System Works 2005 and 2006; allows local users to gain privileges via a crafted Interrupt Request Packet (Irp) in an IOCTL 0x83022323 request to \\symTDI\, which results in memory overwrite.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2007-3673?
CVE-2007-3673 is considered to have a medium severity level, allowing local users to gain elevated privileges.
How do I fix CVE-2007-3673?
To mitigate CVE-2007-3673, update Symantec software to the latest version where the vulnerability is patched.
Which versions are affected by CVE-2007-3673?
CVE-2007-3673 affects various versions of Symantec products, including Norton Antivirus 9 to 10.1 and Client Security 2.0 to 3.1.
What types of software are vulnerable to CVE-2007-3673?
CVE-2007-3673 impacts products like Symantec AntiVirus Corporate Edition, Norton AntiSpam, and Norton Internet Security.
Can CVE-2007-3673 be exploited remotely?
No, CVE-2007-3673 requires local access to exploit, making it less of a risk for remote attacks.