CVE-2006-4802
Summary
| CVE | CVE-2006-4802 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2006-09-14 22:07:00 UTC |
| Updated | 2018-10-17 21:39:00 UTC |
| Description | Format string vulnerability in the Real Time Virus Scan service in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allows local users to execute arbitrary code via an unspecified vector related to alert notification messages, a different vector than CVE-2006-3454, a "second format string vulnerability" as found by the vendor. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Symantec | Client Security | 1.0 | All | All | All |
| Application | Symantec | Client Security | 1.0.1 | All | All | All |
| Application | Symantec | Client Security | 1.0.1_build_8.01.434 | mr3 | All | All |
| Application | Symantec | Client Security | 1.0.1_build_8.01.437 | All | All | All |
| Application | Symantec | Client Security | 1.0.1_build_8.01.446 | mr4 | All | All |
| Application | Symantec | Client Security | 1.0.1_build_8.01.457 | mr5 | All | All |
| Application | Symantec | Client Security | 1.0.1_build_8.01.460 | mr6 | All | All |
| Application | Symantec | Client Security | 1.0.1_build_8.01.464 | mr7 | All | All |
| Application | Symantec | Client Security | 1.0.1_build_8.01.471 | mr8 | All | All |
| Application | Symantec | Client Security | 1.1 | All | All | All |
| Application | Symantec | Client Security | 1.1.1 | All | All | All |
| Application | Symantec | Client Security | 1.1.1_mr1_build_8.1.1.314a | All | All | All |
| Application | Symantec | Client Security | 1.1.1_mr2_build_8.1.1.319 | All | All | All |
| Application | Symantec | Client Security | 1.1.1_mr3_build_8.1.1.323 | All | All | All |
| Application | Symantec | Client Security | 1.1.1_mr4_build_8.1.1.329 | All | All | All |
| Application | Symantec | Client Security | 1.1.1_mr5_build_8.1.1.336 | All | All | All |
| Application | Symantec | Client Security | 1.2 | All | All | All |
| Application | Symantec | Client Security | 1.3 | All | All | All |
| Application | Symantec | Client Security | 1.4 | All | All | All |
| Application | Symantec | Client Security | 1.5 | All | All | All |
| Application | Symantec | Client Security | 1.6 | All | All | All |
| Application | Symantec | Client Security | 1.7 | All | All | All |
| Application | Symantec | Client Security | 1.8 | All | All | All |
| Application | Symantec | Client Security | 1.9 | All | All | All |
| Application | Symantec | Client Security | 2.0 | All | All | All |
| Application | Symantec | Client Security | 2.0.1 | All | All | All |
| Application | Symantec | Client Security | 2.0.2 | All | All | All |
| Application | Symantec | Client Security | 2.0.3 | All | All | All |
| Application | Symantec | Client Security | 2.0.4 | All | All | All |
| Application | Symantec | Client Security | 1.0 | All | All | All |
| Application | Symantec | Client Security | 1.0.1 | All | All | All |
| Application | Symantec | Client Security | 1.0.1_build_8.01.434 | mr3 | All | All |
| Application | Symantec | Client Security | 1.0.1_build_8.01.437 | All | All | All |
| Application | Symantec | Client Security | 1.0.1_build_8.01.446 | mr4 | All | All |
| Application | Symantec | Client Security | 1.0.1_build_8.01.457 | mr5 | All | All |
| Application | Symantec | Client Security | 1.0.1_build_8.01.460 | mr6 | All | All |
| Application | Symantec | Client Security | 1.0.1_build_8.01.464 | mr7 | All | All |
| Application | Symantec | Client Security | 1.0.1_build_8.01.471 | mr8 | All | All |
| Application | Symantec | Client Security | 1.1 | All | All | All |
| Application | Symantec | Client Security | 1.1.1 | All | All | All |
| Application | Symantec | Client Security | 1.1.1_mr1_build_8.1.1.314a | All | All | All |
| Application | Symantec | Client Security | 1.1.1_mr2_build_8.1.1.319 | All | All | All |
| Application | Symantec | Client Security | 1.1.1_mr3_build_8.1.1.323 | All | All | All |
| Application | Symantec | Client Security | 1.1.1_mr4_build_8.1.1.329 | All | All | All |
| Application | Symantec | Client Security | 1.1.1_mr5_build_8.1.1.336 | All | All | All |
| Application | Symantec | Client Security | 1.2 | All | All | All |
| Application | Symantec | Client Security | 1.3 | All | All | All |
| Application | Symantec | Client Security | 1.4 | All | All | All |
| Application | Symantec | Client Security | 1.5 | All | All | All |
| Application | Symantec | Client Security | 1.6 | All | All | All |
| Application | Symantec | Client Security | 1.7 | All | All | All |
| Application | Symantec | Client Security | 1.8 | All | All | All |
| Application | Symantec | Client Security | 1.9 | All | All | All |
| Application | Symantec | Client Security | 2.0 | All | All | All |
| Application | Symantec | Client Security | 2.0.1 | All | All | All |
| Application | Symantec | Client Security | 2.0.2 | All | All | All |
| Application | Symantec | Client Security | 2.0.3 | All | All | All |
| Application | Symantec | Client Security | 2.0.4 | All | All | All |
| Application | Symantec | Norton Antivirus | 8.1 | All | corporate | All |
| Application | Symantec | Norton Antivirus | 8.1.1.319 | All | corporate | All |
| Application | Symantec | Norton Antivirus | 8.1.1.323 | All | corporate | All |
| Application | Symantec | Norton Antivirus | 8.1.1.329 | All | corporate | All |
| Application | Symantec | Norton Antivirus | 8.1.1_build8.1.1.314a | All | corporate | All |
| Application | Symantec | Norton Antivirus | 9.0 | All | corporate | All |
| Application | Symantec | Norton Antivirus | 9.0.1 | All | corporate | All |
| Application | Symantec | Norton Antivirus | 9.0.1.1.1000 | All | corporate | All |
| Application | Symantec | Norton Antivirus | 9.0.1.1000 | All | corporate | All |
| Application | Symantec | Norton Antivirus | 9.0.2 | All | corporate | All |
| Application | Symantec | Norton Antivirus | 9.0.4 | All | corporate | All |
| Application | Symantec | Norton Antivirus | 8.1 | All | corporate | All |
| Application | Symantec | Norton Antivirus | 8.1.1.319 | All | corporate | All |
| Application | Symantec | Norton Antivirus | 8.1.1.323 | All | corporate | All |
| Application | Symantec | Norton Antivirus | 8.1.1.329 | All | corporate | All |
| Application | Symantec | Norton Antivirus | 8.1.1_build8.1.1.314a | All | corporate | All |
| Application | Symantec | Norton Antivirus | 9.0 | All | corporate | All |
| Application | Symantec | Norton Antivirus | 9.0.1 | All | corporate | All |
| Application | Symantec | Norton Antivirus | 9.0.1.1.1000 | All | corporate | All |
| Application | Symantec | Norton Antivirus | 9.0.1.1000 | All | corporate | All |
| Application | Symantec | Norton Antivirus | 9.0.2 | All | corporate | All |
| Application | Symantec | Norton Antivirus | 9.0.4 | All | corporate | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| SecurityTracker.com Archives - Symantec Anti Virus Corporate Edition Custom Notification Format String Bug Lets Local Users Gain Elevated Privileges | SECTRACK | securitytracker.com | |
| Symantec Security Center | CONFIRM | securityresponse.symantec.com | |
| Symantec Products Alert Notification Two Vulnerabilities - Advisories - Secunia | SECUNIA | secunia.com | Vendor Advisory |
| Symantec AntiVirus Corporate Edition Multiple Local Format String Vulnerabilities | BID | www.securityfocus.com | |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.