Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The DeviceIoControl function in the Norton Device Driver (NAVAP.sys) in Symantec Norton AntiVirus 2002 allows local users to gain privileges by overwriting memory locations via certain control codes (aka "Device Driver Attack").
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Symantec Norton AntiVirus设备驱动内存覆写漏洞
Vulnerability Description
Norton Antivirus是一款流行的反病毒系统。 Norton Antivirus设备驱动存在内存破坏问题，本地攻击者可以利用这个漏洞使系统崩溃或可能提升权限。 根据报告，其中一个设备控制操作句柄尝试写数据到传递给DeviceIoControl()指针参数的地址偏移，由于在参数传递或写入地址没有进行任何验证，可导致非特权用户空间程序由于写内存地址而使系统崩溃，存在提升权限的可能。
CVSS Information
N/A
Vulnerability Type
N/A