Approved changes feed: RSS · Atom

cpe:2.3:a:symantec:client_security:2.0_stm_build_9.0.0.338:*:*:*:*:*:*:*

part: a version: 2.0_stm_build_9.0.0.338 update: *

VendorSymantec (88d7b611-7ce9-5631-abc6-1312dc87ce23)
ProductClient Security (54139b4f-9e59-503b-ab5e-768316dcaf96)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-1476 vulnerable 2026-06-08 04:49:42.643541 Details available
The SymTDI device driver (SYMTDI.SYS) in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security 2005 and 2006, AntiVirus Corporate Edition 3.0.x through 10.1.x, and other Norton products, allows local users to cause a denial of service (system crash) by sending crafted data to the driver's \Device file, which triggers invalid memory access, a different vulnerability than CVE-2006-4855.
Published: 2007-03-16T21:00:00.000Z
Updated: 2024-08-07T12:59:08.338Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4855 vulnerable 2026-06-08 04:49:19.041022 Details available
The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0, and 10.1, Symantec pcAnywhere 11.5 only, and Symantec Host, allows local users to cause a denial of service (system crash) via invalid data, as demonstrated by calling DeviceIoControl to send the data.
Published: 2006-09-19T18:00:00.000Z
Updated: 2024-08-07T19:23:41.469Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3455 vulnerable 2026-06-08 04:49:09.367604 Details available
The SAVRT.SYS device driver, as used in Symantec AntiVirus Corporate Edition 8.1 and 9.0.x up to 9.0.3, and Symantec Client Security 1.1 and 2.0.x up to 2.0.3, allows local users to execute arbitrary code via a modified address for the output buffer argument to the DeviceIOControl function.
Published: 2006-10-23T20:00:00.000Z
Updated: 2024-08-07T18:30:33.727Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.