CVE-2006-6308: Symantec Livestate Agent For Windows

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Symantec LiveState 7.1 Agent for Windows allows local users to gain privileges by stopping the shstart.exe process and open "Web Self-Service" from the system tray icon, which will open a browser window running with elevated privileges. NOTE: several third-party researchers have noted that administrator privileges may be necessary to terminate shstart.exe. If this is the case, then no privilege escalation occurs, and this is not a vulnerability

Affected products

• Symantec Livestate Agent For Windows: version 7.1 only

Published 2006-12-06. Last modified 2026-06-16.