CVE-2006-4802 : Detail

CVE-2006-4802

2.47%V3
Local
2006-09-14
20h00 +00:00
2018-10-17
18h57 +00:00
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

Format string vulnerability in the Real Time Virus Scan service in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allows local users to execute arbitrary code via an unspecified vector related to alert notification messages, a different vector than CVE-2006-3454, a "second format string vulnerability" as found by the vendor.

CVE Informations

Metrics

Metrics Score Severity CVSS Vector Source
V2 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P [email protected]

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

Products Mentioned

Configuraton 0

Symantec>>Client_security >> Version 1.0

Symantec>>Client_security >> Version 1.0.1

Symantec>>Client_security >> Version 1.0.1_build_8.01.434

Symantec>>Client_security >> Version 1.0.1_build_8.01.437

Symantec>>Client_security >> Version 1.0.1_build_8.01.446

Symantec>>Client_security >> Version 1.0.1_build_8.01.457

Symantec>>Client_security >> Version 1.0.1_build_8.01.460

Symantec>>Client_security >> Version 1.0.1_build_8.01.464

Symantec>>Client_security >> Version 1.0.1_build_8.01.471

Symantec>>Client_security >> Version 1.1

    Symantec>>Client_security >> Version 1.1.1

    Symantec>>Client_security >> Version 1.1.1_mr1_build_8.1.1.314a

    Symantec>>Client_security >> Version 1.1.1_mr2_build_8.1.1.319

    Symantec>>Client_security >> Version 1.1.1_mr3_build_8.1.1.323

    Symantec>>Client_security >> Version 1.1.1_mr4_build_8.1.1.329

    Symantec>>Client_security >> Version 1.1.1_mr5_build_8.1.1.336

    Symantec>>Client_security >> Version 1.2

      Symantec>>Client_security >> Version 1.3

        Symantec>>Client_security >> Version 1.4

          Symantec>>Client_security >> Version 1.5

            Symantec>>Client_security >> Version 1.6

              Symantec>>Client_security >> Version 1.7

                Symantec>>Client_security >> Version 1.8

                  Symantec>>Client_security >> Version 1.9

                    Symantec>>Client_security >> Version 2.0

                    Symantec>>Client_security >> Version 2.0.1

                    Symantec>>Client_security >> Version 2.0.2

                    Symantec>>Client_security >> Version 2.0.3

                    Symantec>>Client_security >> Version 2.0.4

                    Symantec>>Norton_antivirus >> Version 8.1

                      Symantec>>Norton_antivirus >> Version 8.1.1.319

                      Symantec>>Norton_antivirus >> Version 8.1.1.323

                      Symantec>>Norton_antivirus >> Version 8.1.1.329

                      Symantec>>Norton_antivirus >> Version 8.1.1_build8.1.1.314a

                      Symantec>>Norton_antivirus >> Version 9.0

                        Symantec>>Norton_antivirus >> Version 9.0.1

                          Symantec>>Norton_antivirus >> Version 9.0.1.1.1000

                            Symantec>>Norton_antivirus >> Version 9.0.1.1000

                              Symantec>>Norton_antivirus >> Version 9.0.2

                                Symantec>>Norton_antivirus >> Version 9.0.4

                                  References

                                  http://securitytracker.com/id?1016842
                                  Tags : vdb-entry, x_refsource_SECTRACK
                                  http://www.securityfocus.com/bid/19986
                                  Tags : vdb-entry, x_refsource_BID
                                  http://secunia.com/advisories/21884
                                  Tags : third-party-advisory, x_refsource_SECUNIA