Symantec AntiVirus privilege escalation updated since 05.10.2006
Published:		26.10.2006
Source:		BUGTRAQ
SecurityVulns ID:		6686
Type:		remote
Level:		6/10
Description:		Insufficient address checks in SAVRT, NAVENG and NAVEX15 devices IOCTLS calls allos to overwrite kernel memory.

Affected:		SYMANTEC : Symantec Client Security 1.1
		SYMANTEC : Symantec Client Security 2.0
		SYMANTEC : Symantec AntiVirus 9.0
		SYMANTEC : Symantec AntiVirus 8.1

Original document		SYMANTEC, Symantec Product Security: Symantec Device Driver Elevation of Privileg (26.10.2006)
		Reversemode, [Reversemode Advisory] Symantec Antivirus Engine Privilege Escalation (07.10.2006)
		IDEFENSE, [Full-disclosure] iDefense Security Advisory 10.05.06: Symantec AntiVirus IOCTL Kernel Privilege Escalation Vulnerability (05.10.2006)

Discuss:

Read or add your comments to this news (0 comments)