CVE-2006-4855

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 1.3%

from disclosure to weapon0 days

Published on NVDSep 19

1st PoCSep 15

exploitation probability

1.3%top 33% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0, and 10.1, Symantec pcAnywhere 11.5 only, and Symantec Host, allows local users to cause a denial of service (system crash) via invalid data, as demonstrated by calling DeviceIoControl to send the data.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/28588

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References