The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.1.7, and possibly other products using symevent.sys 12.0.0.20, allows local users to cause a denial of service (system crash) via invalid data, as demonstrated by calling DeviceIoControl to send the data, a reintroduction of CVE-2006-4855.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-03-16T22:00:00

Updated: 2024-08-07T12:59:08.531Z

Reserved: 2007-03-16T00:00:00

Link: CVE-2007-1495

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2007-03-16T22:19:00.000

Modified: 2018-10-16T16:38:46.267

Link: CVE-2007-1495

cve-icon Redhat

No data.