CVE-2007-3800

Severity: medium (CVSS 6.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-07-16 · updated 2026-06-16

Description

Unspecified vulnerability in the Real-time scanner (RTVScan) component in Symantec AntiVirus Corporate Edition 9.0 through 10.1 and Client Security 2.0 through 3.1, when the Notification Message window is enabled, allows local users to gain privileges via crafted code.

Affected products

Symantec Client Security: through 3.0; 2.0, 2.1
Symantec Norton Antivirus: through 10.1; 9.0, 10.0

References

http://osvdb.org/36116
http://secunia.com/advisories/26054
http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11c.html
http://www.securityfocus.com/bid/24810
http://www.vupen.com/english/advisories/2007/2506
https://exchange.xforce.ibmcloud.com/vulnerabilities/35352
http://osvdb.org/36116
http://secunia.com/advisories/26054
http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11c.html
http://www.securityfocus.com/bid/24810
http://www.vupen.com/english/advisories/2007/2506
https://exchange.xforce.ibmcloud.com/vulnerabilities/35352

Get alerted when CVE-2007-3800 or the next vulnerability affects your stack