CVE-2006-3725

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-07-21 · updated 2026-06-16

Description

Norton Personal Firewall 2006 9.1.0.33 allows local users to cause a denial of service (crash) via certain RegSaveKey, RegRestoreKey and RegDeleteKey operations on the (1) HKLM\SYSTEM\CurrentControlSet\Services\SNDSrvc and (2) HKLM\SYSTEM\CurrentControlSet\Services\SymEvent registry keys.

Affected products

Symantec Norton Personal Firewall: 2006_9.1.0.33

References

http://securityreason.com/securityalert/1241
http://www.matousec.com/info/advisories/Norton-Insufficient-protection-of-Norton-service-registry-keys.php
http://www.securityfocus.com/archive/1/440110/100/0/threaded
http://www.securityfocus.com/bid/18995
https://exchange.xforce.ibmcloud.com/vulnerabilities/27764
http://securityreason.com/securityalert/1241
http://www.matousec.com/info/advisories/Norton-Insufficient-protection-of-Norton-service-registry-keys.php
http://www.securityfocus.com/archive/1/440110/100/0/threaded
http://www.securityfocus.com/bid/18995
https://exchange.xforce.ibmcloud.com/vulnerabilities/27764

Get alerted when CVE-2006-3725 or the next vulnerability affects your stack