Local User Vulnerabilities in Symantec Norton Personal Firewall 2006

CVE-2006-4266

Summary

Symantec Norton Personal Firewall 2006 and earlier versions contain a vulnerability where the firewall fails to adequately protect its registry keys. This flaw enables local users to exploit the RegSaveKey and RegRestoreKey functions to alter the HKLM\SOFTWARE\Symantec\CCPD\SuiteOwners key, which can allow the injection of Trojan horse libraries into the product. Although typically, exploiting this vulnerability requires administrative privileges, it undermines the intended security functions of the software by allowing potential unauthorized modifications to critical components, thus exposing users to increased risks.

References