CVE-2006-4927

The (a) NAVENG (NAVENG.SYS) and (b) NAVEX15 (NAVEX15.SYS) device drivers 20061.3.0.12 and later, as used in Symantec AntiVirus and security products, allow…

published October 5, 2006

CVSS
—
EPSS
2%
Percentile
77.8
In the wild
Unconfirmed
What it is

The (a) NAVENG (NAVENG.SYS) and (b) NAVEX15 (NAVEX15.SYS) device drivers 20061.3.0.12 and later, as used in Symantec AntiVirus and security products, allow local users to gain privileges by overwriting critical system addresses using a crafted Irp to the IOCTL functions (1) 0x222AD3, (2) 0x222AD7, and (3) 0x222ADB.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01755 · 77.8th percentile
Published
2006-10-05T21:00Z
EPSS history
Timeline
  • 05 OCT 21:00Z
    The (a) NAVENG (NAVENG.SYS) and (b) NAVEX15 (NAVEX15.SYS) device drivers 20061.3.0.12 and later, as used in Symantec AntiVirus and security products, allow…
    cvelistv5