National Cyber Awareness System

Vulnerability Summary for CVE-2007-3673

Overview

Symantec symtdi.sys before 7.0.0, as distributed in Symantec AntiVirus Corporate Edition 9 through 10.1 and Client Security 2.0 through 3.1, Norton AntiSpam 2005, and Norton AntiVirus, Internet Security, Personal Firewall, and System Works 2005 and 2006; allows local users to gain privileges via a crafted Interrupt Request Packet (Irp) in an IOCTL 0x83022323 request to \\symTDI\, which results in memory overwrite.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: IDEFENSE

Name: 20070711 Symantec AntiVirus symtdi.sys Local Privilege Escalation Vulnerability

Type: Patch Information

Hyperlink:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=554

External Source: VUPEN

Name: ADV-2007-2507

Hyperlink:http://www.vupen.com/english/advisories/2007/2507

External Source: BID

Name: 22351

Hyperlink:http://www.securityfocus.com/bid/22351

External Source: SECTRACK

Name: 1018372

Hyperlink:http://securitytracker.com/id?1018372

External Source: CONFIRM

Name: http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11d.html

Hyperlink:http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11d.html

External Source: SECUNIA

Name: 26042

Type: Advisory

Hyperlink:http://secunia.com/advisories/26042

External Source: OSVDB

Name: 36117

Hyperlink:http://osvdb.org/36117

External Source: XF

Name: symantec-multi-symtdi-privilege-escalation(35347)

Hyperlink:http://xforce.iss.net/xforce/xfdb/35347