CVE-2007-3673

Symantec symtdi.sys before 7.0.0, as distributed in Symantec AntiVirus Corporate Edition 9 through 10.1 and Client Security 2.0 through 3.1, Norton AntiSpam 2005, and Norton AntiVirus, Internet Security, Personal Firewall, and System Works 2005 and 2006; allows local users to gain privileges via a crafted Interrupt Request Packet (Irp) in an IOCTL 0x83022323 request to \\symTDI\, which results in memory overwrite.

CVSS v2.0

6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

1.06% chance of exploitation in the next 30 days, 62th percentile

Published

2007-07-15

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/4178

References

• CVE Record
• NVD entry

Related

• CVE-2007-3670
• CVE-2007-3681
• CVE-2007-3655
• CVE-2007-3682
• CVE-2007-3653
• CVE-2007-3683