CVE-2011-3477

CWE-20 — Improper Input Validation3 documents3 sources
Severity
5.5MEDIUM
EPSS
0.1%
top 82.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Symantec Norton GhostSymantec Backup Exec System RecoverySymantec Norton 360+1 more
Timeline
PublishedFeb 19
Latest updateMay 14

Description

GEAR Software CD DVD Filter driver (aka GEARAspiWDM.sys), as used in Symantec Backup Exec System Recovery 8.5 and BESR 2010, Symantec System Recovery 2011, Norton 360, and Norton Ghost, allows local users to cause a denial of service (system crash) via unspecified vectors.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

Patches

Patch: www.symantec.com ↗Patch: www.symantec.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-j4p4-pcg2-c352: GEAR Software CD DVD Filter driver (aka GEARAspiWDM↗2022-05-14
▶
CVEList
CVE-2011-3477: GEAR Software CD DVD Filter driver (aka GEARAspiWDM↗2018-02-19
▶
CVE-2011-3477 (MEDIUM CVSS 5.5) | GEAR Software CD DVD Filter driver | cvebase.io