CVE-2007-1495

3 documents3 sources
Severity
4.9MEDIUM
EPSS
0.1%
top 78.47%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Symantec Norton Personal Firewall
Timeline
PublishedMar 16
Latest updateMay 1

Description

The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.1.7, and possibly other products using symevent.sys 12.0.0.20, allows local users to cause a denial of service (system crash) via invalid data, as demonstrated by calling DeviceIoControl to send the data, a reintroduction of CVE-2006-4855.

CVSS vector

AV:L/AC:L/C:N/I:N/A:CExploitability: 3.9 | Impact: 6.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-q82c-8r22-pj45: The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9↗2022-05-01
▶
CVEList
CVE-2007-1495: The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9↗2007-03-16
▶