Norton Personal Firewall
Approved changes feed: RSS · Atom
cpe:2.3:a:symantec:norton_personal_firewall:2006_9.1.1.7:*:*:*:*:*:*:*
part: a version: 2006_9.1.1.7 update: *
| Vendor | Symantec (88d7b611-7ce9-5631-abc6-1312dc87ce23) |
|---|---|
| Product | Norton Personal Firewall (b935344f-3efd-5d8d-a36d-6f864e145f50) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2007-3699 |
vulnerable | 2026-06-08 04:49:54.662674 |
Details available
The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header.
Published: 2007-10-05T21:00:00.000Z
Updated: 2024-08-07T14:28:52.091Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-1793 |
vulnerable | 2026-06-08 04:49:43.477925 |
Details available
SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate certain arguments before being passed to hooked SSDT function handlers, which allows local users to cause a denial of service (crash) or possibly execute arbitrary code via crafted arguments to the (1) NtCreateMutant and (2) NtOpenEvent functions. NOTE: it was later reported that Norton Internet Security 2008 15.0.0.60, and possibly other versions back to 2006, are also affected.
Published: 2007-04-02T22:00:00.000Z
Updated: 2024-08-07T13:06:26.391Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-1495 |
vulnerable | 2026-06-08 04:49:42.719702 |
Details available
The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.1.7, and possibly other products using symevent.sys 12.0.0.20, allows local users to cause a denial of service (system crash) via invalid data, as demonstrated by calling DeviceIoControl to send the data, a reintroduction of CVE-2006-4855.
Published: 2007-03-16T22:00:00.000Z
Updated: 2024-08-07T12:59:08.531Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-0447 |
vulnerable | 2026-06-08 04:49:32.196296 |
Details available
Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives.
Published: 2007-10-05T21:00:00.000Z
Updated: 2024-08-07T12:19:30.204Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.