Format string vulnerability in the Real Time Virus Scan service in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allows local users to execute arbitrary code via an unspecified vector related to alert notification messages, a different vector than CVE-2006-3454, a "second format string vulnerability" as found by the vendor.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 00:16
Type | Values Removed | Values Added |
---|---|---|
References | () http://secunia.com/advisories/21884 - Vendor Advisory | |
References | () http://securityresponse.symantec.com/avcenter/security/Content/2006.09.13.html - | |
References | () http://securitytracker.com/id?1016842 - | |
References | () http://www.securityfocus.com/archive/1/446293/100/0/threaded - | |
References | () http://www.securityfocus.com/bid/19986 - | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/28937 - |
Information
Published : 2006-09-14 22:07
Updated : 2024-11-21 00:16
NVD link : CVE-2006-4802
Mitre link : CVE-2006-4802
CVE.ORG link : CVE-2006-4802
JSON object : View
Products Affected
symantec
- client_security
- norton_antivirus
CWE