Vulnerabilities > CVE-2006-4802 - Local Format String vulnerability in Symantec Client Security and Norton Antivirus

CVSS 4.6 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

local

low complexity

symantec

NVD

Published: 2006-09-14

Updated: 2018-10-17

Summary

Format string vulnerability in the Real Time Virus Scan service in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allows local users to execute arbitrary code via an unspecified vector related to alert notification messages, a different vector than CVE-2006-3454, a "second format string vulnerability" as found by the vendor.

Vulnerable Configurations

Part	Description	Count
Application	Symantec Symantec Client Security 1.0 Symantec Client Security 1.0.1 Symantec Client Security 1.0.1_Build_8.01.434 Symantec Client Security 1.0.1_Build_8.01.437 Symantec Client Security 1.0.1_Build_8.01.446 Symantec Client Security 1.0.1_Build_8.01.457 Symantec Client Security 1.0.1_Build_8.01.460 Symantec Client Security 1.0.1_Build_8.01.464 Symantec Client Security 1.0.1_Build_8.01.471 Symantec Client Security 1.1 Symantec Client Security 1.1.1 Symantec Client Security 1.1.1_Mr1_Build_8.1.1.314A Symantec Client Security 1.1.1_Mr2_Build_8.1.1.319 Symantec Client Security 1.1.1_Mr3_Build_8.1.1.323 Symantec Client Security 1.1.1_Mr4_Build_8.1.1.329 Symantec Client Security 1.1.1_Mr5_Build_8.1.1.336 Symantec Client Security 1.2 Symantec Client Security 1.3 Symantec Client Security 1.4 Symantec Client Security 1.5 Symantec Client Security 1.6 Symantec Client Security 1.7 Symantec Client Security 1.8 Symantec Client Security 1.9 Symantec Client Security 2.0 Symantec Client Security 2.0.1 Symantec Client Security 2.0.2 Symantec Client Security 2.0.3 Symantec Client Security 2.0.4 Symantec Norton Antivirus 8.1 Symantec Norton Antivirus 8.1.1.319 Symantec Norton Antivirus 8.1.1.323 Symantec Norton Antivirus 8.1.1.329 Symantec Norton Antivirus 8.1.1_Build8.1.1.314A Symantec Norton Antivirus 9.0 Symantec Norton Antivirus 9.0.1 Symantec Norton Antivirus 9.0.1.1.1000 Symantec Norton Antivirus 9.0.1.1000 Symantec Norton Antivirus 9.0.2 Symantec Norton Antivirus 9.0.4	40

Summary

Vulnerable Configurations

References