CVE-2006-3455: Symantec Client Security

Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days.

The SAVRT.SYS device driver, as used in Symantec AntiVirus Corporate Edition 8.1 and 9.0.x up to 9.0.3, and Symantec Client Security 1.1 and 2.0.x up to 2.0.3, allows local users to execute arbitrary code via a modified address for the output buffer argument to the DeviceIOControl function.

Affected products

• Symantec Client Security: version 1.1 only; version 1.1.1 only; version 1.1.1_build_393 only; version 1.1.1_mr1_build_8.1.1.314a only; version 1.1.1_mr2_build_8.1.1.319 only; version 1.1.1_mr3_build_8.1.1.323 only; …
• Symantec Norton Antivirus: version 8.1 only; version 8.1.0.825a only; version 8.1.1 only; version 8.1.1.319 only; version 8.1.1.323 only; version 8.1.1.329 only; …

Published 2006-10-23. Last modified 2026-06-16.