Back to list
SymEvent Driver Local Access System Denial of Service
Mar 14 2007 03:27PM
Matousec - Transparent security Research (research matousec com)
Today, we have accidentally discovered that the vulnerability, which is described here
and its third party identifications are
Secunia Advisory: SA21938
is active again in the today's update of Norton Personal Firewall 2006 version 126.96.36.199.
Probably, some changes have been made in the SymEvent driver since it was fixed
that causes that the driver is vulnerable again.
The version of symevent.sys on the testing system is 188.8.131.52.
Matousec - Transparent security Research
[ reply ]
Copyright 2010, SecurityFocus