Read the docs
TI-2006-04637 Aliases CVE-2006-4802GHSA-g9vf-rjj3-hjhg

Format string vulnerability in the Real Time Virus Scan service in Symantec AntiVirus…

Priority LOW 22Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Format string vulnerability in the Real Time Virus Scan service in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allows local users to execute arbitrary code via an unspecified vector related to alert notification messages, a different vector than CVE-2006-3454, a "second format string vulnerability" as found by the vendor.

Why it matters now

EPSS 0.00451 39th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 40

CPEVersionsRoleVendor
cpe:2.3:a:symantec:client_security:1.0:*:*:*:*:*:*:*1.0VulnerableSymantec
cpe:2.3:a:symantec:client_security:1.0.1:*:*:*:*:*:*:*1.0.1VulnerableSymantec
cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.434:mr3:*:*:*:*:*:*1.0.1_build_8.01.434 mr3VulnerableSymantec
cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.437:*:*:*:*:*:*:*1.0.1_build_8.01.437VulnerableSymantec
cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.446:mr4:*:*:*:*:*:*1.0.1_build_8.01.446 mr4VulnerableSymantec
cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.457:mr5:*:*:*:*:*:*1.0.1_build_8.01.457 mr5VulnerableSymantec
cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.460:mr6:*:*:*:*:*:*1.0.1_build_8.01.460 mr6VulnerableSymantec
cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.464:mr7:*:*:*:*:*:*1.0.1_build_8.01.464 mr7VulnerableSymantec
cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.471:mr8:*:*:*:*:*:*1.0.1_build_8.01.471 mr8VulnerableSymantec
cpe:2.3:a:symantec:client_security:1.1:*:*:*:*:*:*:*1.1VulnerableSymantec
  • cpe:2.3:a:symantec:client_security:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.434:mr3:*:*:*:*:*:* Versions 1.0.1_build_8.01.434 mr3 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.437:*:*:*:*:*:*:* Versions 1.0.1_build_8.01.437 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.446:mr4:*:*:*:*:*:* Versions 1.0.1_build_8.01.446 mr4 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.457:mr5:*:*:*:*:*:* Versions 1.0.1_build_8.01.457 mr5 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.460:mr6:*:*:*:*:*:* Versions 1.0.1_build_8.01.460 mr6 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.464:mr7:*:*:*:*:*:* Versions 1.0.1_build_8.01.464 mr7 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.471:mr8:*:*:*:*:*:* Versions 1.0.1_build_8.01.471 mr8 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:1.1:*:*:*:*:*:*:* Versions 1.1 Vulnerable ·Symantec
Show 30 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:symantec:client_security:1.1.1:*:*:*:*:*:*:*1.1.1VulnerableSymantec
cpe:2.3:a:symantec:client_security:1.1.1_mr1_build_8.1.1.314a:*:*:*:*:*:*:*1.1.1_mr1_build_8.1.1.314aVulnerableSymantec
cpe:2.3:a:symantec:client_security:1.1.1_mr2_build_8.1.1.319:*:*:*:*:*:*:*1.1.1_mr2_build_8.1.1.319VulnerableSymantec
cpe:2.3:a:symantec:client_security:1.1.1_mr3_build_8.1.1.323:*:*:*:*:*:*:*1.1.1_mr3_build_8.1.1.323VulnerableSymantec
cpe:2.3:a:symantec:client_security:1.1.1_mr4_build_8.1.1.329:*:*:*:*:*:*:*1.1.1_mr4_build_8.1.1.329VulnerableSymantec
cpe:2.3:a:symantec:client_security:1.1.1_mr5_build_8.1.1.336:*:*:*:*:*:*:*1.1.1_mr5_build_8.1.1.336VulnerableSymantec
cpe:2.3:a:symantec:client_security:1.2:*:*:*:*:*:*:*1.2VulnerableSymantec
cpe:2.3:a:symantec:client_security:1.3:*:*:*:*:*:*:*1.3VulnerableSymantec
cpe:2.3:a:symantec:client_security:1.4:*:*:*:*:*:*:*1.4VulnerableSymantec
cpe:2.3:a:symantec:client_security:1.5:*:*:*:*:*:*:*1.5VulnerableSymantec
cpe:2.3:a:symantec:client_security:1.6:*:*:*:*:*:*:*1.6VulnerableSymantec
cpe:2.3:a:symantec:client_security:1.7:*:*:*:*:*:*:*1.7VulnerableSymantec
cpe:2.3:a:symantec:client_security:1.8:*:*:*:*:*:*:*1.8VulnerableSymantec
cpe:2.3:a:symantec:client_security:1.9:*:*:*:*:*:*:*1.9VulnerableSymantec
cpe:2.3:a:symantec:client_security:2.0:*:*:*:*:*:*:*2.0VulnerableSymantec
cpe:2.3:a:symantec:client_security:2.0.1:*:*:*:*:*:*:*2.0.1VulnerableSymantec
cpe:2.3:a:symantec:client_security:2.0.2:*:*:*:*:*:*:*2.0.2VulnerableSymantec
cpe:2.3:a:symantec:client_security:2.0.3:*:*:*:*:*:*:*2.0.3VulnerableSymantec
cpe:2.3:a:symantec:client_security:2.0.4:*:*:*:*:*:*:*2.0.4VulnerableSymantec
cpe:2.3:a:symantec:norton_antivirus:8.1:*:corporate:*:*:*:*:*8.1VulnerableSymantec
cpe:2.3:a:symantec:norton_antivirus:8.1.1.319:*:corporate:*:*:*:*:*8.1.1.319VulnerableSymantec
cpe:2.3:a:symantec:norton_antivirus:8.1.1.323:*:corporate:*:*:*:*:*8.1.1.323VulnerableSymantec
cpe:2.3:a:symantec:norton_antivirus:8.1.1.329:*:corporate:*:*:*:*:*8.1.1.329VulnerableSymantec
cpe:2.3:a:symantec:norton_antivirus:8.1.1_build8.1.1.314a:*:corporate:*:*:*:*:*8.1.1_build8.1.1.314aVulnerableSymantec
cpe:2.3:a:symantec:norton_antivirus:9.0:*:corporate:*:*:*:*:*9.0VulnerableSymantec
cpe:2.3:a:symantec:norton_antivirus:9.0.1:*:corporate:*:*:*:*:*9.0.1VulnerableSymantec
cpe:2.3:a:symantec:norton_antivirus:9.0.1.1.1000:*:corporate:*:*:*:*:*9.0.1.1.1000VulnerableSymantec
cpe:2.3:a:symantec:norton_antivirus:9.0.1.1000:*:corporate:*:*:*:*:*9.0.1.1000VulnerableSymantec
cpe:2.3:a:symantec:norton_antivirus:9.0.2:*:corporate:*:*:*:*:*9.0.2VulnerableSymantec
cpe:2.3:a:symantec:norton_antivirus:9.0.4:*:corporate:*:*:*:*:*9.0.4VulnerableSymantec
  • cpe:2.3:a:symantec:client_security:1.1.1:*:*:*:*:*:*:* Versions 1.1.1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:1.1.1_mr1_build_8.1.1.314a:*:*:*:*:*:*:* Versions 1.1.1_mr1_build_8.1.1.314a Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:1.1.1_mr2_build_8.1.1.319:*:*:*:*:*:*:* Versions 1.1.1_mr2_build_8.1.1.319 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:1.1.1_mr3_build_8.1.1.323:*:*:*:*:*:*:* Versions 1.1.1_mr3_build_8.1.1.323 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:1.1.1_mr4_build_8.1.1.329:*:*:*:*:*:*:* Versions 1.1.1_mr4_build_8.1.1.329 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:1.1.1_mr5_build_8.1.1.336:*:*:*:*:*:*:* Versions 1.1.1_mr5_build_8.1.1.336 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:1.2:*:*:*:*:*:*:* Versions 1.2 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:1.3:*:*:*:*:*:*:* Versions 1.3 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:1.4:*:*:*:*:*:*:* Versions 1.4 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:1.5:*:*:*:*:*:*:* Versions 1.5 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:1.6:*:*:*:*:*:*:* Versions 1.6 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:1.7:*:*:*:*:*:*:* Versions 1.7 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:1.8:*:*:*:*:*:*:* Versions 1.8 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:1.9:*:*:*:*:*:*:* Versions 1.9 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:2.0.1:*:*:*:*:*:*:* Versions 2.0.1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:2.0.2:*:*:*:*:*:*:* Versions 2.0.2 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:2.0.3:*:*:*:*:*:*:* Versions 2.0.3 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:2.0.4:*:*:*:*:*:*:* Versions 2.0.4 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_antivirus:8.1:*:corporate:*:*:*:*:* Versions 8.1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_antivirus:8.1.1.319:*:corporate:*:*:*:*:* Versions 8.1.1.319 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_antivirus:8.1.1.323:*:corporate:*:*:*:*:* Versions 8.1.1.323 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_antivirus:8.1.1.329:*:corporate:*:*:*:*:* Versions 8.1.1.329 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_antivirus:8.1.1_build8.1.1.314a:*:corporate:*:*:*:*:* Versions 8.1.1_build8.1.1.314a Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_antivirus:9.0:*:corporate:*:*:*:*:* Versions 9.0 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_antivirus:9.0.1:*:corporate:*:*:*:*:* Versions 9.0.1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_antivirus:9.0.1.1.1000:*:corporate:*:*:*:*:* Versions 9.0.1.1.1000 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_antivirus:9.0.1.1000:*:corporate:*:*:*:*:* Versions 9.0.1.1000 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_antivirus:9.0.2:*:corporate:*:*:*:*:* Versions 9.0.2 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_antivirus:9.0.4:*:corporate:*:*:*:*:* Versions 9.0.4 Vulnerable ·Symantec

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2006-4802
  2. 2026-10-03 Alias added: GHSA-g9vf-rjj3-hjhg

References

Other 1

  • TI-2009-01353 The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2)… CVSS 2.0HIGH 10.0
  • TI-2006-02539 Stack-based buffer overflow in Symantec Antivirus 10.1 and Client Security 3.1 allows… CVSS 2.0HIGH 10.0
  • TI-2009-01354 Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in… CVSS 2.0HIGH 9.3
  • TI-2010-00103 Buffer overflow in the cliproxy.objects.1 ActiveX control in the Symantec Client Proxy… CVSS 2.0HIGH 10.0
  • TI-2004-00401 Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and… CVSS 2.0HIGH 10.0
  • TI-2009-01355 XFR.EXE in the Intel File Transfer service in the console in Symantec Alert Management… CVSS 2.0HIGH 9.3
See all 26 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences