VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 16, 2007· Updated Jun 16, 2026

CVE-2007-1495

CVE-2007-1495

Description

The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.1.7, and possibly other products using symevent.sys 12.0.0.20, allows local users to cause a denial of service (system crash) via invalid data, as demonstrated by calling DeviceIoControl to send the data, a reintroduction of CVE-2006-4855.

Affected products

3
  • Symantec/Norton Personal Firewall2 versions
    cpe:2.3:a:symantec:norton_personal_firewall:2006_9.1.1.7:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:symantec:norton_personal_firewall:2006_9.1.1.7:*:*:*:*:*:*:*
    • (no CPE)range: = 2006 9.1.1.7
  • Symantec/symevent.sysllm-fuzzy
    Range: = 12.0.0.20

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.