Read the docs
TI-2006-04120 Aliases CVE-2006-4266GHSA-wvr4-w8j2-frwr

Symantec Norton Personal Firewall 2006 9.1.0.33, and possibly earlier, does not properly…

Priority LOW 17Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Symantec Norton Personal Firewall 2006 9.1.0.33, and possibly earlier, does not properly protect Norton registry keys, which allows local users to provide Trojan horse libraries to Norton by using RegSaveKey and RegRestoreKey to modify HKLM\SOFTWARE\Symantec\CCPD\SuiteOwners, as demonstrated using NISProd.dll. NOTE: in most cases, this attack would not cross privilege boundaries, because modifying the SuiteOwners key requires administrative privileges. However, this issue is a vulnerability because the product's functionality is intended to protect against privileged actions such as this.

Why it matters now

EPSS 0.00351 28th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:symantec:norton_personal_firewall:*:*:*:*:*:*:*:*up to 2006_9.1.0.33VulnerableSymantec
  • cpe:2.3:a:symantec:norton_personal_firewall:*:*:*:*:*:*:*:* Versions up to 2006_9.1.0.33 Vulnerable ·Symantec

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2006-4266
  2. 2026-10-03 Alias added: GHSA-wvr4-w8j2-frwr

References

Advisory 1

Other 1

  • TI-2007-01626 Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal… CVSS 2.0HIGH 10.0
  • TI-2004-00401 Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and… CVSS 2.0HIGH 10.0
  • TI-2007-00434 Heap-based buffer overflow in the Decomposer component in multiple Symantec products… CVSS 2.0HIGH 9.3
  • TI-2007-03589 The Decomposer component in multiple Symantec products allows remote attackers to cause a… CVSS 2.0HIGH 9.3
  • TI-2002-00641 Buffer overflow in HTTP Proxy for Symantec Norton Personal Internet Firewall 3.0.4.91 and… CVSS 2.0HIGH 7.5
  • TI-2002-01698 The "block fragmented IP Packets" option in Symantec Norton Personal Firewall 2002 (NPW)… CVSS 2.0HIGH 7.5
See all 17 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences