CVE Feed

    Dashboard / CVE / CVE-2007-1495

    CVE-2007-1495

    The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.1.7, and possibly other products using symevent.sys 12.0.0.20, allows local users to cause a denial of service (system crash) via invalid data, as demonstrated by calling DeviceIoControl to send the data, a reintroduction of CVE-2006-4855.

    Published:Mar 16, 2007
    Last Modified:Apr 23, 2026
    EPS:Mar 16, 2007
    EPSS Score:0.0007
    CVSS Score:4.9

    Affected Products

    Vendor
    Symantec
    Product
    Norton Personal Firewall

    Exploits

    http://www.securityfocus.com/bid/22961http://www.securityfocus.com/bid/22961

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2007-0447 (CVSS 9.3) — Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers t…
    CVE-2007-3699 (CVSS 9.3) — The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (i…
    CVE-2007-3673 (CVSS 6.9) — Symantec symtdi.sys before 7.0.0, as distributed in Symantec AntiVirus Corporate Edition 9 through 10.1 and Cl…
    CVE-2007-1689 (CVSS 10) — Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and In…
    CVE-2007-1793 (CVSS 4.9) — SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate certain argument…
    CVE-2007-1476 (CVSS 1.9) — The SymTDI device driver (SYMTDI.SYS) in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet …
    CVE-2006-4855 (CVSS 4.9) — The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton P…
    CVE-2006-4266 (CVSS 3.6) — Symantec Norton Personal Firewall 2006 9.1.0.33, and possibly earlier, does not properly protect Norton regist…
    CVE-2006-3725 (CVSS 2.1) — Norton Personal Firewall 2006 9.1.0.33 allows local users to cause a denial of service (crash) via certain Reg…
    CVE-2006-1836 (CVSS 6.8) — Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 throu…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High