GCVE - cpe:2.3:a:symantec:client_security:1.1.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:symantec:client_security:1.1.1:*:*:*:*:*:*:*

part: a version: 1.1.1 update: *

Vendor	Symantec (`88d7b611-7ce9-5631-abc6-1312dc87ce23`)
Product	Client Security (`54139b4f-9e59-503b-ab5e-768316dcaf96`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-4855`	vulnerable	2026-06-08 04:49:19.034939	Details available The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0, and 10.1, Symantec pcAnywhere 11.5 only, and Symantec Host, allows local users to cause a denial of service (system crash) via invalid data, as demonstrated by calling DeviceIoControl to send the data. Published: 2006-09-19T18:00:00.000Z Updated: 2024-08-07T19:23:41.469Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1016892 http://secunia.com/advisories/21938 http://securitytracker.com/id?1016893 http://securitytracker.com/id?1016895 http://securitytracker.com/id?1016889	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4802`	vulnerable	2026-06-08 04:49:18.830291	Details available Format string vulnerability in the Real Time Virus Scan service in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allows local users to execute arbitrary code via an unspecified vector related to alert notification messages, a different vector than CVE-2006-3454, a "second format string vulnerability" as found by the vendor. Published: 2006-09-14T22:00:00.000Z Updated: 2024-08-07T19:23:41.127Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1016842 https://exchange.xforce.ibmcloud.com/vulnerabilities/28937 http://www.securityfocus.com/bid/19986 http://secunia.com/advisories/21884 http://securityresponse.symantec.com/avcenter/security/Content/2006.09.13.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3455`	vulnerable	2026-06-08 04:49:09.357944	Details available The SAVRT.SYS device driver, as used in Symantec AntiVirus Corporate Edition 8.1 and 9.0.x up to 9.0.3, and Symantec Client Security 1.1 and 2.0.x up to 2.0.3, allows local users to execute arbitrary code via a modified address for the output buffer argument to the DeviceIOControl function. Published: 2006-10-23T20:00:00.000Z Updated: 2024-08-07T18:30:33.727Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/29762 http://www.securityfocus.com/bid/20684 http://www.vupen.com/english/advisories/2006/4157 http://www.symantec.com/avcenter/security/Content/2006.10.23.html http://www.securityfocus.com/archive/1/449524/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3454`	vulnerable	2026-06-08 04:49:09.351784	Details available Multiple format string vulnerabilities in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allow local users to execute arbitrary code via format strings in (1) Tamper Protection and (2) Virus Alert Notification messages. Published: 2006-09-14T00:00:00.000Z Updated: 2024-08-07T18:30:34.302Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1016842 https://exchange.xforce.ibmcloud.com/vulnerabilities/28936 http://www.securityfocus.com/archive/1/446041/100/0/threaded http://layereddefense.com/SAV13SEPT.html http://www.securityfocus.com/bid/19986	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.