CVE-2011-3477

Severity: medium (CVSS 5.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-02-19 · updated 2026-06-16
Weakness: CWE-20

Description

GEAR Software CD DVD Filter driver (aka GEARAspiWDM.sys), as used in Symantec Backup Exec System Recovery 8.5 and BESR 2010, Symantec System Recovery 2011, Norton 360, and Norton Ghost, allows local users to cause a denial of service (system crash) via unspecified vectors.

Affected products

Symantec Backup Exec System Recovery: 8.5, 9.0, 2010
Symantec Norton 360: 5.0
Symantec Norton Ghost: through 15.0
Symantec System Recovery 2011: 10.0

References

http://www.securityfocus.com/bid/47822
https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20111109_00
http://www.securityfocus.com/bid/47822
https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20111109_00

Get alerted when CVE-2011-3477 or the next vulnerability affects your stack