Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for naveng_driver by symantec

    CVE-2006-4927 (GCVE-0-2006-4927)

    Vulnerability from nvd – Published: 2006-10-05 21:00 – Updated: 2024-08-07 19:32
    VLAI
    Summary
    The (a) NAVENG (NAVENG.SYS) and (b) NAVEX15 (NAVEX15.SYS) device drivers 20061.3.0.12 and later, as used in Symantec AntiVirus and security products, allow local users to gain privileges by overwriting critical system addresses using a crafted Irp to the IOCTL functions (1) 0x222AD3, (2) 0x222AD7, and (3) 0x222ADB.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://securitytracker.com/id?1016996 vdb-entryx_refsource_SECTRACK
    http://www.securityfocus.com/archive/1/447849/100… mailing-listx_refsource_BUGTRAQ
    http://securitytracker.com/id?1017001 vdb-entryx_refsource_SECTRACK
    http://www.symantec.com/avcenter/security/Content… x_refsource_CONFIRM
    http://securitytracker.com/id?1017000 vdb-entryx_refsource_SECTRACK
    http://securitytracker.com/id?1016997 vdb-entryx_refsource_SECTRACK
    http://securitytracker.com/id?1016995 vdb-entryx_refsource_SECTRACK
    http://www.vupen.com/english/advisories/2006/3928 vdb-entryx_refsource_VUPEN
    http://securitytracker.com/id?1016998 vdb-entryx_refsource_SECTRACK
    http://www.idefense.com/intelligence/vulnerabilit… third-party-advisoryx_refsource_IDEFENSE
    http://securitytracker.com/id?1016994 vdb-entryx_refsource_SECTRACK
    http://secunia.com/advisories/22288 third-party-advisoryx_refsource_SECUNIA
    http://www.securityfocus.com/bid/20360 vdb-entryx_refsource_BID
    http://securitytracker.com/id?1016999 vdb-entryx_refsource_SECTRACK
    http://securitytracker.com/id?1017002 vdb-entryx_refsource_SECTRACK
    http://securityreason.com/securityalert/1690 third-party-advisoryx_refsource_SREASON
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://www.kb.cert.org/vuls/id/946820 third-party-advisoryx_refsource_CERT-VN
    Date Public
    2006-10-05 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T19:32:22.313Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1016996",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016996"
          },
          {
            "name": "20061005 [Reversemode Advisory] Symantec Antivirus Engine Privilege Escalation",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/447849/100/0/threaded"
          },
          {
            "name": "1017001",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1017001"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.symantec.com/avcenter/security/Content/2006.10.05a.html"
          },
          {
            "name": "1017000",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1017000"
          },
          {
            "name": "1016997",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016997"
          },
          {
            "name": "1016995",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016995"
          },
          {
            "name": "ADV-2006-3928",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/3928"
          },
          {
            "name": "1016998",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016998"
          },
          {
            "name": "20061005 Symantec AntiVirus IOCTL Kernel Privilege Escalation Vulnerability",
            "tags": [
              "third-party-advisory",
              "x_refsource_IDEFENSE",
              "x_transferred"
            ],
            "url": "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=417"
          },
          {
            "name": "1016994",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016994"
          },
          {
            "name": "22288",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22288"
          },
          {
            "name": "20360",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/20360"
          },
          {
            "name": "1016999",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016999"
          },
          {
            "name": "1017002",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1017002"
          },
          {
            "name": "1690",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/1690"
          },
          {
            "name": "symantec-ioctl-privilege-escalation(29360)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29360"
          },
          {
            "name": "VU#946820",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/946820"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-10-05T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The (a) NAVENG (NAVENG.SYS) and (b) NAVEX15 (NAVEX15.SYS) device drivers 20061.3.0.12 and later, as used in Symantec AntiVirus and security products, allow local users to gain privileges by overwriting critical system addresses using a crafted Irp to the IOCTL functions (1) 0x222AD3, (2) 0x222AD7, and (3) 0x222ADB."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-17T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1016996",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016996"
        },
        {
          "name": "20061005 [Reversemode Advisory] Symantec Antivirus Engine Privilege Escalation",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/447849/100/0/threaded"
        },
        {
          "name": "1017001",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1017001"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.symantec.com/avcenter/security/Content/2006.10.05a.html"
        },
        {
          "name": "1017000",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1017000"
        },
        {
          "name": "1016997",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016997"
        },
        {
          "name": "1016995",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016995"
        },
        {
          "name": "ADV-2006-3928",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/3928"
        },
        {
          "name": "1016998",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016998"
        },
        {
          "name": "20061005 Symantec AntiVirus IOCTL Kernel Privilege Escalation Vulnerability",
          "tags": [
            "third-party-advisory",
            "x_refsource_IDEFENSE"
          ],
          "url": "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=417"
        },
        {
          "name": "1016994",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016994"
        },
        {
          "name": "22288",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22288"
        },
        {
          "name": "20360",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/20360"
        },
        {
          "name": "1016999",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016999"
        },
        {
          "name": "1017002",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1017002"
        },
        {
          "name": "1690",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/1690"
        },
        {
          "name": "symantec-ioctl-privilege-escalation(29360)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29360"
        },
        {
          "name": "VU#946820",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/946820"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-4927",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The (a) NAVENG (NAVENG.SYS) and (b) NAVEX15 (NAVEX15.SYS) device drivers 20061.3.0.12 and later, as used in Symantec AntiVirus and security products, allow local users to gain privileges by overwriting critical system addresses using a crafted Irp to the IOCTL functions (1) 0x222AD3, (2) 0x222AD7, and (3) 0x222ADB."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1016996",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016996"
            },
            {
              "name": "20061005 [Reversemode Advisory] Symantec Antivirus Engine Privilege Escalation",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/447849/100/0/threaded"
            },
            {
              "name": "1017001",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1017001"
            },
            {
              "name": "http://www.symantec.com/avcenter/security/Content/2006.10.05a.html",
              "refsource": "CONFIRM",
              "url": "http://www.symantec.com/avcenter/security/Content/2006.10.05a.html"
            },
            {
              "name": "1017000",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1017000"
            },
            {
              "name": "1016997",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016997"
            },
            {
              "name": "1016995",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016995"
            },
            {
              "name": "ADV-2006-3928",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/3928"
            },
            {
              "name": "1016998",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016998"
            },
            {
              "name": "20061005 Symantec AntiVirus IOCTL Kernel Privilege Escalation Vulnerability",
              "refsource": "IDEFENSE",
              "url": "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=417"
            },
            {
              "name": "1016994",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016994"
            },
            {
              "name": "22288",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22288"
            },
            {
              "name": "20360",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/20360"
            },
            {
              "name": "1016999",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016999"
            },
            {
              "name": "1017002",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1017002"
            },
            {
              "name": "1690",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/1690"
            },
            {
              "name": "symantec-ioctl-privilege-escalation(29360)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29360"
            },
            {
              "name": "VU#946820",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/946820"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-4927",
    "datePublished": "2006-10-05T21:00:00.000Z",
    "dateReserved": "2006-09-22T00:00:00.000Z",
    "dateUpdated": "2024-08-07T19:32:22.313Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2006-4927 (GCVE-0-2006-4927)

    Vulnerability from cvelistv5 – Published: 2006-10-05 21:00 – Updated: 2024-08-07 19:32
    VLAI
    Summary
    The (a) NAVENG (NAVENG.SYS) and (b) NAVEX15 (NAVEX15.SYS) device drivers 20061.3.0.12 and later, as used in Symantec AntiVirus and security products, allow local users to gain privileges by overwriting critical system addresses using a crafted Irp to the IOCTL functions (1) 0x222AD3, (2) 0x222AD7, and (3) 0x222ADB.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://securitytracker.com/id?1016996 vdb-entryx_refsource_SECTRACK
    http://www.securityfocus.com/archive/1/447849/100… mailing-listx_refsource_BUGTRAQ
    http://securitytracker.com/id?1017001 vdb-entryx_refsource_SECTRACK
    http://www.symantec.com/avcenter/security/Content… x_refsource_CONFIRM
    http://securitytracker.com/id?1017000 vdb-entryx_refsource_SECTRACK
    http://securitytracker.com/id?1016997 vdb-entryx_refsource_SECTRACK
    http://securitytracker.com/id?1016995 vdb-entryx_refsource_SECTRACK
    http://www.vupen.com/english/advisories/2006/3928 vdb-entryx_refsource_VUPEN
    http://securitytracker.com/id?1016998 vdb-entryx_refsource_SECTRACK
    http://www.idefense.com/intelligence/vulnerabilit… third-party-advisoryx_refsource_IDEFENSE
    http://securitytracker.com/id?1016994 vdb-entryx_refsource_SECTRACK
    http://secunia.com/advisories/22288 third-party-advisoryx_refsource_SECUNIA
    http://www.securityfocus.com/bid/20360 vdb-entryx_refsource_BID
    http://securitytracker.com/id?1016999 vdb-entryx_refsource_SECTRACK
    http://securitytracker.com/id?1017002 vdb-entryx_refsource_SECTRACK
    http://securityreason.com/securityalert/1690 third-party-advisoryx_refsource_SREASON
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://www.kb.cert.org/vuls/id/946820 third-party-advisoryx_refsource_CERT-VN
    Date Public
    2006-10-05 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T19:32:22.313Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1016996",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016996"
          },
          {
            "name": "20061005 [Reversemode Advisory] Symantec Antivirus Engine Privilege Escalation",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/447849/100/0/threaded"
          },
          {
            "name": "1017001",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1017001"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.symantec.com/avcenter/security/Content/2006.10.05a.html"
          },
          {
            "name": "1017000",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1017000"
          },
          {
            "name": "1016997",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016997"
          },
          {
            "name": "1016995",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016995"
          },
          {
            "name": "ADV-2006-3928",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/3928"
          },
          {
            "name": "1016998",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016998"
          },
          {
            "name": "20061005 Symantec AntiVirus IOCTL Kernel Privilege Escalation Vulnerability",
            "tags": [
              "third-party-advisory",
              "x_refsource_IDEFENSE",
              "x_transferred"
            ],
            "url": "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=417"
          },
          {
            "name": "1016994",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016994"
          },
          {
            "name": "22288",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22288"
          },
          {
            "name": "20360",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/20360"
          },
          {
            "name": "1016999",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016999"
          },
          {
            "name": "1017002",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1017002"
          },
          {
            "name": "1690",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/1690"
          },
          {
            "name": "symantec-ioctl-privilege-escalation(29360)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29360"
          },
          {
            "name": "VU#946820",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/946820"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-10-05T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The (a) NAVENG (NAVENG.SYS) and (b) NAVEX15 (NAVEX15.SYS) device drivers 20061.3.0.12 and later, as used in Symantec AntiVirus and security products, allow local users to gain privileges by overwriting critical system addresses using a crafted Irp to the IOCTL functions (1) 0x222AD3, (2) 0x222AD7, and (3) 0x222ADB."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-17T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1016996",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016996"
        },
        {
          "name": "20061005 [Reversemode Advisory] Symantec Antivirus Engine Privilege Escalation",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/447849/100/0/threaded"
        },
        {
          "name": "1017001",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1017001"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.symantec.com/avcenter/security/Content/2006.10.05a.html"
        },
        {
          "name": "1017000",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1017000"
        },
        {
          "name": "1016997",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016997"
        },
        {
          "name": "1016995",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016995"
        },
        {
          "name": "ADV-2006-3928",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/3928"
        },
        {
          "name": "1016998",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016998"
        },
        {
          "name": "20061005 Symantec AntiVirus IOCTL Kernel Privilege Escalation Vulnerability",
          "tags": [
            "third-party-advisory",
            "x_refsource_IDEFENSE"
          ],
          "url": "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=417"
        },
        {
          "name": "1016994",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016994"
        },
        {
          "name": "22288",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22288"
        },
        {
          "name": "20360",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/20360"
        },
        {
          "name": "1016999",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016999"
        },
        {
          "name": "1017002",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1017002"
        },
        {
          "name": "1690",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/1690"
        },
        {
          "name": "symantec-ioctl-privilege-escalation(29360)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29360"
        },
        {
          "name": "VU#946820",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/946820"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-4927",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The (a) NAVENG (NAVENG.SYS) and (b) NAVEX15 (NAVEX15.SYS) device drivers 20061.3.0.12 and later, as used in Symantec AntiVirus and security products, allow local users to gain privileges by overwriting critical system addresses using a crafted Irp to the IOCTL functions (1) 0x222AD3, (2) 0x222AD7, and (3) 0x222ADB."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1016996",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016996"
            },
            {
              "name": "20061005 [Reversemode Advisory] Symantec Antivirus Engine Privilege Escalation",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/447849/100/0/threaded"
            },
            {
              "name": "1017001",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1017001"
            },
            {
              "name": "http://www.symantec.com/avcenter/security/Content/2006.10.05a.html",
              "refsource": "CONFIRM",
              "url": "http://www.symantec.com/avcenter/security/Content/2006.10.05a.html"
            },
            {
              "name": "1017000",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1017000"
            },
            {
              "name": "1016997",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016997"
            },
            {
              "name": "1016995",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016995"
            },
            {
              "name": "ADV-2006-3928",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/3928"
            },
            {
              "name": "1016998",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016998"
            },
            {
              "name": "20061005 Symantec AntiVirus IOCTL Kernel Privilege Escalation Vulnerability",
              "refsource": "IDEFENSE",
              "url": "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=417"
            },
            {
              "name": "1016994",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016994"
            },
            {
              "name": "22288",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22288"
            },
            {
              "name": "20360",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/20360"
            },
            {
              "name": "1016999",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016999"
            },
            {
              "name": "1017002",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1017002"
            },
            {
              "name": "1690",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/1690"
            },
            {
              "name": "symantec-ioctl-privilege-escalation(29360)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29360"
            },
            {
              "name": "VU#946820",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/946820"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-4927",
    "datePublished": "2006-10-05T21:00:00.000Z",
    "dateReserved": "2006-09-22T00:00:00.000Z",
    "dateUpdated": "2024-08-07T19:32:22.313Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}