CVE-2006-1836: Symantec Liveupdate

Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which allows local users to gain privileges via a Trojan horse program.

Affected products

• Symantec Liveupdate: version 3.0 only; version 3.0.1 only; version 3.0.2 only; version 3.0.3 only; version 3.5 only
• Symantec Norton Antivirus: version 9.0.0 only; version 9.0.1 only; version 9.0.2 only; version 9.0.3 only; version 10.0 only; version 10.0.0 only; …
• Symantec Norton Internet Security: version 3.0 only
• Symantec Norton Personal Firewall: version 3.0 only; version 3.1 only
• Symantec Norton System Works: version 3.0 only
• Symantec Norton Utilities: version 8.0 only

Published 2006-04-19. Last modified 2026-06-16.