| Package | Affected versions | Patched versions |
|---|---|---|
| client security | = 2.0= 3.0= 3.1 | |
| norton antispam | = 2005 | |
| norton antivirus | = 10.0= 10.1= 2005= 2006= 9.0= 9.0.0.338= 9.0.1= 9.0.1.1.1000= 9.0.1.1000= 9.0.2= 9.0.2.1000= 9.0.3.1000= 9.0.4= 9.0.5= 9.0.5.1100 | |
| norton internet security | = 2005= 2006 | |
| norton personal firewall | = 2005= 2006 | |
| norton system works | = 2005= 2006 |
Symantec symtdi.sys before 7.0.0, as distributed in Symantec AntiVirus Corporate Edition 9 through 10.1 and Client Security 2.0 through 3.1, Norton AntiSpam 2005, and Norton AntiVirus, Internet Security, Personal Firewall, and System Works 2005 and 2006; allows local users to gain privileges via a crafted Interrupt Request Packet (Irp) in an IOCTL 0x83022323 request to \\symTDI\, which results in memory overwrite.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free