4.6med
CVE-2003-13101 exploit
The DeviceIoControl function in the Norton Device Driver (NAVAP.sys) in Symantec Norton AntiVirus 2002 allows local users to gain privilege…
Published 22 y ago · modified 4 mo ago · JSON
CVSS
4.6
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.2%
percentile 69%
Public exploits
1
Exploit-DB
Summary
The DeviceIoControl function in the Norton Device Driver (NAVAP.sys) in Symantec Norton AntiVirus 2002 allows local users to gain privileges by overwriting memory locations via certain control codes (aka "Device Driver Attack").
Exploit prediction (EPSS)
1.21% probability of exploitation in the next 30 days, higher than 69% of all scored CVEs.
Exploits and detections
- EDB-22980 Symantec Norton AntiVirus 2002/2003 - Device Driver Memory Overwrite · local · 2003-08-02
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 4.6 | AV:L/AC:L/Au:N/C:P/I:P/A:P |
References
- osvdb.org /4362 · vdb-entry, x_refsource_OSVDB, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/12824 · vdb-entry, x_refsource_XF, x_transferred
- sec-labs.hack.pl /papers/win32ddc.php · x_refsource_MISC, x_transferred
- securityfocus.com /bid/8329 · vdb-entry, x_refsource_BID, x_transferred
- secunia.com /advisories/9460 · third-party-advisory, x_refsource_SECUNIA, x_transferred
Sources
- CVE List: CVE-2003-1310
- NVD: CVE-2003-1310
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.