Symantec Device Driver Elevation of Privilege

by certifiedbug on October 24, 2006

in Security

CIAC BULLETIN
R-024: Symantec Device Driver Elevation of Privilege
[SYM06-022]

PROBLEM: There is a vulnerability in a device driver which, if successfully exploited, could allow a local attacker to execute arbitrary code with elevated privileges or to crash the system.
PLATFORM: Symantec AntiVirus Corporate Edition 9.0.3 and earlier
Symantec Client Security 2.0.3 and earlier
DAMAGE: A successful exploit could potentially allow a local attacker to execute code of their choice with elevated privileges, or to crash the system.
SOLUTION: Apply current patches.

LINKS:
CIAC: BULLETIN
Symantec: SYM06-022
CVE:CVE-2006-3455

Previous post: Internet Explorer 7 for Windows XP Released

Next post: Halloween Exploits and Cactus Vxgame Sites to Avoid