CVE-2011-3477: Input Validation
First published: Mon Feb 19 2018(Updated: )
GEAR Software CD DVD Filter driver (aka GEARAspiWDM.sys), as used in Symantec Backup Exec System Recovery 8.5 and BESR 2010, Symantec System Recovery 2011, Norton 360, and Norton Ghost, allows local users to cause a denial of service (system crash) via unspecified vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Symantec Norton 360 | =5.0 | |
| Symantec Norton Ghost | <=15.0 | |
| Symantec Backup Exec System Recovery | =8.5 | |
| Symantec Backup Exec System Recovery | =9.0 | |
| Symantec Backup Exec System Recovery | =2010 | |
| Symantec System Recovery 2011 | =10.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2011-3477?
The severity of CVE-2011-3477 is medium with a severity value of 5.5.
Which software is affected by CVE-2011-3477?
Symantec Norton 360 version 5.0, Symantec Norton Ghost up to version 15.0, Symantec Backup Exec System Recovery version 8.5, 9.0, and 2010, and Symantec System Recovery 2011 are affected by CVE-2011-3477.
How can CVE-2011-3477 be exploited?
The exact vectors through which CVE-2011-3477 can be exploited have not been specified.
What is the Common Weakness Enumeration (CWE) ID for CVE-2011-3477?
The CWE ID for CVE-2011-3477 is 20.
Where can I find more information about CVE-2011-3477?
You can find more information about CVE-2011-3477 at the following links: [SecurityFocus](http://www.securityfocus.com/bid/47822) and [Symantec Security Response](https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20111109_00).
- collector/nvd-historical
- collector/nvd-index
- agent/author
- agent/severity
- agent/weakness
- agent/references
- agent/type
- agent/description
- agent/event
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/symantec
- canonical/symantec norton 360
- version/symantec norton 360/5.0
- canonical/symantec norton ghost
- version/symantec norton ghost/15.0
- canonical/symantec backup exec system recovery
- version/symantec backup exec system recovery/8.5
- version/symantec backup exec system recovery/9.0
- version/symantec backup exec system recovery/2010
- canonical/symantec system recovery 2011
- version/symantec system recovery 2011/10.0