CVE-2007-3673: Symantec Client Security

Medium severity, CVSS 6.9. EPSS: 1.1% chance of exploitation in the next 30 days.

Symantec symtdi.sys before 7.0.0, as distributed in Symantec AntiVirus Corporate Edition 9 through 10.1 and Client Security 2.0 through 3.1, Norton AntiSpam 2005, and Norton AntiVirus, Internet Security, Personal Firewall, and System Works 2005 and 2006; allows local users to gain privileges via a crafted Interrupt Request Packet (Irp) in an IOCTL 0x83022323 request to \\symTDI\, which results in memory overwrite.

Affected products

• Symantec Client Security: version 2.0 only; version 3.0 only; version 3.1 only
• Symantec Norton Antispam: version 2005 only
• Symantec Norton Antivirus: version 9.0 only; version 9.0.0.338 only; version 9.0.1 only; version 9.0.1.1.1000 only; version 9.0.1.1000 only; version 9.0.2 only; …
• Symantec Norton Internet Security: version 2005 only; version 2006 only
• Symantec Norton Personal Firewall: version 2005 only; version 2006 only
• Symantec Norton System Works: version 2005 only; version 2006 only

Published 2007-07-15. Last modified 2026-06-16.