CVE:CVE-2006-4855
CNNVD:CNNVD-200609-347
Symantec Norton个人防火墙是非常流行的防火墙软件。
Symantec Norton个人防火墙的实现上存在漏洞，本地攻击者可能利用此漏洞对系统执行拒绝服务攻击。
Norton没有充分地保护 \Device\SymEvent 驱动，也没有验证其输入缓冲区，允许Everyone向这个驱动中写入数据，可能导致驱动执行无效的内存操作以及整个操作系统崩溃。
solution:Upgrade symantec client_security to a higher version than 1.0,1.0.0_b8.01.9378,1.0.1,1.0.1_build_8.01.425a:mr1,1.0.1_build_8.01.429c:mr2,1.0.1_build_8.01.434:mr3,1.0.1_build_8.01.437,1.0.1_build_8.01.446:mr4,1.0.1_build_8.01.457:mr5,1.0.1_build_8.01.460:mr6,1.0.1_build_8.01.464:mr7,1.0.1_build_8.01.471:mr8,1.0.1_build_8.01.501:mr9,1.0_build_8.01.9374,1.1,1.1.1,1.1.1_build_393,1.1.1_mr1_build_8.1.1.314a,1.1.1_mr2_build_8.1.1.319,1.1.1_mr3_build_8.1.1.323,1.1.1_mr4_build_8.1.1.329,1.1.1_mr5_build_8.1.1.336,1.1.1_mr6_b8.1.1.266,1.1_stm_b8.1.0.825a,2.0,2.0.1_build_9.0.1.1000:mr1,2.0.2_build_9.0.2.1000:mr2,2.0.3_build_9.0.3.1000:mr3,2.0.5_build_1100,2.0_scf_7.1,2.0_stm_build_9.0.0.338,3.0,3.1,and avoid the version 1.0,1.0.0_b8.01.9378,1.0.1,1.0.1_build_8.01.425a:mr1,1.0.1_build_8.01.429c:mr2,1.0.1_build_8.01.434:mr3,1.0.1_build_8.01.437,1.0.1_build_8.01.446:mr4,1.0.1_build_8.01.457:mr5,1.0.1_build_8.01.460:mr6,1.0.1_build_8.01.464:mr7,1.0.1_build_8.01.471:mr8,1.0.1_build_8.01.501:mr9,1.0_build_8.01.9374,1.1,1.1.1,1.1.1_build_393,1.1.1_mr1_build_8.1.1.314a,1.1.1_mr2_build_8.1.1.319,1.1.1_mr3_build_8.1.1.323,1.1.1_mr4_build_8.1.1.329,1.1.1_mr5_build_8.1.1.336,1.1.1_mr6_b8.1.1.266,1.1_stm_b8.1.0.825a,2.0,2.0.1_build_9.0.1.1000:mr1,2.0.2_build_9.0.2.1000:mr2,2.0.3_build_9.0.3.1000:mr3,2.0.5_build_1100,2.0_scf_7.1,2.0_stm_build_9.0.0.338,3.0,3.1; Upgrade symantec host_ids to a higher version than *; Upgrade symantec norton_antivirus to a higher version than 2.1,8.0,8.0.1,8.0.1.425a,8.0.1.425c,8.0.1.501,8.0.1.9374,8.0.1.9378,8.1,8.1.0.825a,8.1.1,8.1.1.319,8.1.1.323,8.1.1.329,8.1.1.366,8.1.1.377,8.1.1_build8.1.1.314a,8.1.1_build393,8.01.434,8.01.437,8.01.446,8.01.457,8.01.460,8.01.464,8.01.471,9.0,9.0.0.338,9.0.1.1.1000,9.0.2.1000,9.0.3.1000,9.0.4,9.0.5,9.0.5.1100,10.0,10.0.2.2000,10.0.2.2001,10.0.2.2002,10.0.2.2010,10.0.2.2011,10.0.2.2020,10.0.2.2021,10.1,2003,2004,2005,2006,2007,and avoid the version 2.1,8.0,8.0.1,8.0.1.425a,8.0.1.425c,8.0.1.501,8.0.1.9374,8.0.1.9378,8.1,8.1.0.825a,8.1.1,8.1.1.319,8.1.1.323,8.1.1.329,8.1.1.366,8.1.1.377,8.1.1_build8.1.1.314a,8.1.1_build393,8.01.434,8.01.437,8.01.446,8.01.457,8.01.460,8.01.464,8.01.471,9.0,9.0.0.338,9.0.1.1.1000,9.0.2.1000,9.0.3.1000,9.0.4,9.0.5,9.0.5.1100,10.0,10.0.2.2000,10.0.2.2001,10.0.2.2002,10.0.2.2010,10.0.2.2011,10.0.2.2020,10.0.2.2021,10.1,2003,2004,2005,2006,2007; Upgrade symantec norton_internet_security to a higher version than 2003,2004,2005,2006,2007,and avoid the version 2003,2004,2005,2006,2007; Upgrade symantec norton_personal_firewall to a higher version than 2003,2004,2005,2006,and avoid the version 2003,2004,2005,2006; Upgrade symantec norton_system_works to a higher version than 2003_professional_edition,2004,2004_professional_edition,2005,2005_premier,2006,and avoid the version 2003_professional_edition,2004,2004_professional_edition,2005,2005_premier,2006; Upgrade symantec pcanywhere to a higher version than 11.5,and avoid the version 11.5