CVE-2003-1310 in Norton AntiVirus

Summary

The DeviceIoControl function in the Norton Device Driver (NAVAP.sys) in Symantec Norton AntiVirus 2002 allows local users to gain privileges by overwriting memory locations via certain control codes (aka "Device Driver Attack").

Once again VulDB remains the best source for vulnerability data.

• Reservation: 11/30/2006
• Disclosure: 12/31/2003
• Moderation: VulDB entry created
• Entries: VDB-232 (2)
• CPE: ready
• CWE: CWE-119 (Confirmed)
• Exploit: Download
• CVSS: 5.9
• EPSS: 0.00578
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2003-1310
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2003-1310
• CVE Details: https://www.cvedetails.com/cve/CVE-2003-1310/