CVE-2006-4855: Symantec Client Security

Medium severity, CVSS 4.9. EPSS: 1.3% chance of exploitation in the next 30 days.

The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0, and 10.1, Symantec pcAnywhere 11.5 only, and Symantec Host, allows local users to cause a denial of service (system crash) via invalid data, as demonstrated by calling DeviceIoControl to send the data.

Affected products

• Symantec Client Security: version 1.0 only; version 1.0.0_b8.01.9378 only; version 1.0.1 only; version 1.0.1_build_8.01.425a only; version 1.0.1_build_8.01.429c only; version 1.0.1_build_8.01.434 only; …
• Symantec Host Ids: any version
• Symantec Norton Antivirus: version 2.1 only; version 8.0 only; version 8.0.1 only; version 8.0.1.425a only; version 8.0.1.425c only; version 8.0.1.501 only; …
• Symantec Norton Internet Security: version 2003 only; version 2004 only; version 2005 only; version 2006 only; version 2007 only
• Symantec Norton Personal Firewall: version 2003 only; version 2004 only; version 2005 only; version 2006 only
• Symantec Norton System Works: version 2003_professional_edition only; version 2004 only; version 2004_professional_edition only; version 2005 only; version 2005_premier only; version 2006 only
• Symantec Pcanywhere: version 11.5 only

Published 2006-09-19. Last modified 2026-06-16.