CVE-2006-4802

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-09-14 · updated 2026-06-16

Description

Format string vulnerability in the Real Time Virus Scan service in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allows local users to execute arbitrary code via an unspecified vector related to alert notification messages, a different vector than CVE-2006-3454, a "second format string vulnerability" as found by the vendor.

Affected products

Symantec Client Security: 1.0, 1.0.1, 1.0.1_build_8.01.434-mr3, 1.0.1_build_8.01.437, 1.0.1_build_8.01.446-mr4, 1.0.1_build_8.01.457-mr5 (+23)
Symantec Norton Antivirus: 8.1, 8.1.1.319, 8.1.1.323, 8.1.1.329, 8.1.1_build8.1.1.314a, 9.0 (+5)

References

http://secunia.com/advisories/21884
http://securityresponse.symantec.com/avcenter/security/Content/2006.09.13.html
http://securitytracker.com/id?1016842
http://www.securityfocus.com/archive/1/446293/100/0/threaded
http://www.securityfocus.com/bid/19986
https://exchange.xforce.ibmcloud.com/vulnerabilities/28937
http://secunia.com/advisories/21884
http://securityresponse.symantec.com/avcenter/security/Content/2006.09.13.html
http://securitytracker.com/id?1016842
http://www.securityfocus.com/archive/1/446293/100/0/threaded
http://www.securityfocus.com/bid/19986
https://exchange.xforce.ibmcloud.com/vulnerabilities/28937

Get alerted when CVE-2006-4802 or the next vulnerability affects your stack