Unrated severityNVD Advisory· Published Dec 31, 2003· Updated Apr 16, 2026

CVE-2003-1310

Description

The DeviceIoControl function in the Norton Device Driver (NAVAP.sys) in Symantec Norton AntiVirus 2002 allows local users to gain privileges by overwriting memory locations via certain control codes (aka "Device Driver Attack").

Affected products

Symantec/Norton Antivirus2 versions
cpe:2.3:a:symantec:norton_antivirus:2002:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:symantec:norton_antivirus:2002:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:norton_antivirus:2003:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securityfocus.com/bid/8329nvdExploit
secunia.com/advisories/9460nvdVendor Advisory
sec-labs.hack.pl/papers/win32ddc.phpnvd
www.osvdb.org/4362nvd
exchange.xforce.ibmcloud.com/vulnerabilities/12824nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000