SkipNavigation
Home | FAQ | Contact | Privacy Policy
US-CERT
American Flag
  Vulnerability
Notes
Database

Search Vulnerability Notes

Vulnerability Notes Help Information


 
 View Notes By
  Name

ID Number

CVE Name

Date Public

Date Published

Date Updated

Severity Metric
 Other Documents
  Technical Alerts

Technical Bulletins

Alerts

Security Tips

Vulnerability Note VU#946820

Symantec products fail to properly limit device driver access to kernel memory

Overview

Certain device drivers included with Symantec products fail to properly verify address space within the "IOCTL" handlers.

I. Description

Symantec provides Anti-Virus and Internet Security products that are designed to protect users. According to Symantec Security Response SYM06-020:

    A specially crafted IRP could be sent to the IOCTL handler function which could allow memory to be overwritten because the address space was not properly validated.

The device drivers NAVENG and NAVEX15 improperly validate address space when processing IOCTL 0x222AD3, 0x222AD7, and 0x222ADB. A specially crafted I/O request packet (IRP) to the IOCTL handler function could overwrite a user supplied address with a constant double word value. Note that this vulnerability only affects the Symantec and Norton anti-virus products for Windows NT, Windows 2000, and Windows XP.

II. Impact

This vulnerability could allow a local attacker to execute arbitrary code with kernel level privileges.

III. Solution

Update
Symantec has addressed this issue with new virus definitions as specified in Symantec Security Response SYM06-020.

Systems Affected

VendorStatusDate NotifiedDate Updated
Symantec, Inc.Vulnerable10-Oct-2006

References


http://securityresponse.symantec.com/avcenter/security/Content/2006.10.05a.html
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=417

Credit

This issue was reported in Symantec Security Response SYM06-020. Symantec credits Ruben Santamarta working with the iDefense Vulnerability Contributor Program for reporting this issue.

This document was written by Chris Taschner.

Other Information

Date Public:2006-10-06
Date First Published:2006-10-10
Date Last Updated:2006-10-11
CERT Advisory: 
CVE-ID(s):CVE-2006-4927
NVD-ID(s):CVE-2006-4927
US-CERT Technical Alerts: 
Metric:3.99
Document Revision:11

If you have feedback, comments, or additional information about this vulnerability, please send us email.
 

 
Page Corner Image
Produced 2006 by US-CERT, a government organization
Disclaimers and copyright information
Get Adobe Reader Get Adobe Reader