Approved changes feed: RSS · Atom

cpe:2.3:a:symantec:client_security:1.1.1_mr5_build_8.1.1.336:*:*:*:*:*:*:*

part: a version: 1.1.1_mr5_build_8.1.1.336 update: *

VendorSymantec (88d7b611-7ce9-5631-abc6-1312dc87ce23)
ProductClient Security (54139b4f-9e59-503b-ab5e-768316dcaf96)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-4855 vulnerable 2026-06-03 14:27:44.150120 Details available
The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0, and 10.1, Symantec pcAnywhere 11.5 only, and Symantec Host, allows local users to cause a denial of service (system crash) via invalid data, as demonstrated by calling DeviceIoControl to send the data.
Published: 2006-09-19T18:00:00.000Z
Updated: 2024-08-07T19:23:41.469Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4802 vulnerable 2026-06-03 14:27:43.917822 Details available
Format string vulnerability in the Real Time Virus Scan service in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allows local users to execute arbitrary code via an unspecified vector related to alert notification messages, a different vector than CVE-2006-3454, a "second format string vulnerability" as found by the vendor.
Published: 2006-09-14T22:00:00.000Z
Updated: 2024-08-07T19:23:41.127Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3455 vulnerable 2026-06-03 14:27:35.096557 Details available
The SAVRT.SYS device driver, as used in Symantec AntiVirus Corporate Edition 8.1 and 9.0.x up to 9.0.3, and Symantec Client Security 1.1 and 2.0.x up to 2.0.3, allows local users to execute arbitrary code via a modified address for the output buffer argument to the DeviceIOControl function.
Published: 2006-10-23T20:00:00.000Z
Updated: 2024-08-07T18:30:33.727Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0249 vulnerable 2026-06-03 14:26:49.910245 Details available
Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header.
Published: 2005-02-08T05:00:00.000Z
Updated: 2024-08-07T21:05:25.457Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.