CVE:CVE-2007-1476
CNNVD:CNNVD-200703-393
Symantec Norton个人防火墙是非常流行的防火墙软件。
Norton个人防火墙的驱动实现上存在漏洞，本地攻击者可能利用此漏洞导致系统崩溃。
Norton个人防火墙没有充分地保护其\Device\SymEvent驱动，且没有验证输入缓冲区，因此本地攻击者可以打开这个驱动并发送被认为是有效的任意数据。当在输入缓冲区中重组数据时驱动可能会执行无效的内存操作，导致整个操作系统拒绝服务。
solution:Upgrade symantec client_security to a higher version than 2.0,2.0:build_9.0.0.338,2.0.1,2.0.1_build_9.0.1.1000:mr1,2.0.2,2.0.2_build_9.0.2.1000:mr2,2.0.3,2.0.3_build_9.0.3.1000:mr3,2.0.4,2.0.4:mr4_build1000,2.0.5,2.0.5_build_1100,2.0.5_build_1100_mp1:mr5,2.0.6,2.0.6:mr6,2.0_scf_7.1,2.0_stm_build_9.0.0.338,2.1,3.0,3.0.0.359,3.0.1.1000,3.0.1.1001,3.0.1.1007,3.0.1.1008,3.0.1.1009,3.0.2,3.0.2.2000,3.0.2.2001,3.0.2.2002,3.0.2.2010,3.0.2.2011,3.0.2.2020,3.0.2.2021,3.1,3.1.0.396,3.1.0.401,3.1.394,3.1.396,3.1.400,3.1.401,and avoid the version 2.0,2.0:build_9.0.0.338,2.0.1,2.0.1_build_9.0.1.1000:mr1,2.0.2,2.0.2_build_9.0.2.1000:mr2,2.0.3,2.0.3_build_9.0.3.1000:mr3,2.0.4,2.0.4:mr4_build1000,2.0.5,2.0.5_build_1100,2.0.5_build_1100_mp1:mr5,2.0.6,2.0.6:mr6,2.0_scf_7.1,2.0_stm_build_9.0.0.338,2.1,3.0,3.0.0.359,3.0.1.1000,3.0.1.1001,3.0.1.1007,3.0.1.1008,3.0.1.1009,3.0.2,3.0.2.2000,3.0.2.2001,3.0.2.2002,3.0.2.2010,3.0.2.2011,3.0.2.2020,3.0.2.2021,3.1,3.1.0.396,3.1.0.401,3.1.394,3.1.396,3.1.400,3.1.401; Upgrade symantec norton_antispam to a higher version than 2005,and avoid the version 2005; Upgrade symantec norton_antivirus to a higher version than 3.0,9.0,9.0.0.338,9.0.1,9.0.1.1.1000,9.0.1.1000,9.0.2,9.0.2.1000,9.0.3.1000,9.0.4,9.0.5,9.0.5.1100,9.0.6.1000,10.0,10.0.1.1000,10.0.1.1007,10.0.1.1008,10.0.2.2000,10.0.2.2001,10.0.2.2002,10.0.2.2010,10.0.2.2011,10.0.2.2020,10.0.2.2021,10.1,10.1.4,10.1.4.4010,10.1.394,10.1.396,10.1.400,10.1.401,2005,2006,and avoid the version 3.0,9.0,9.0.0.338,9.0.1,9.0.1.1.1000,9.0.1.1000,9.0.2,9.0.2.1000,9.0.3.1000,9.0.4,9.0.5,9.0.5.1100,9.0.6.1000,10.0,10.0.1.1000,10.0.1.1007,10.0.1.1008,10.0.2.2000,10.0.2.2001,10.0.2.2002,10.0.2.2010,10.0.2.2011,10.0.2.2020,10.0.2.2021,10.1,10.1.4,10.1.4.4010,10.1.394,10.1.396,10.1.400,10.1.401,2005,2006; Upgrade symantec norton_internet_security to a higher version than 2005,2006,and avoid the version 2005,2006; Upgrade symantec norton_personal_firewall to a higher version than 2006_9.1.1.7,2005,2006,2006_9.1.0.33,and avoid the version (,2006_9.1.1.7],2005,2006,2006_9.1.0.33; Upgrade symantec norton_system_works to a higher version than 2005,2006,and avoid the version 2005,2006