Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2011-3477

GEAR Software CD DVD Filter driver (aka GEARAspiWDM.sys), as used in Symantec Backup Exec System Recovery 8.5 and BESR 2010, Symantec System Recovery 2011, Norton 360, and Norton Ghost, allows local users to cause a denial of service (system crash) via unspecified vectors.

Published

2018-02-19T19:29:00.267

Last Modified

2024-11-21T01:30:33.283

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 5.5 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: NONE
Availability Impact: COMPLETE

Exploitability Score

3.9

Impact Score

6.9

Weaknesses

Type: Primary
CWE-20

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	symantec	backup_exec_system_recovery	8.5	Yes
Application	symantec	backup_exec_system_recovery	9.0	Yes
Application	symantec	backup_exec_system_recovery	2010	Yes
Application	symantec	norton_360	5.0	Yes
Application	symantec	norton_ghost	≤ 15.0	Yes
Application	symantec	system_recovery_2011	10.0	Yes

References

http://www.securityfocus.com/bid/47822 Third Party Advisory, VDB Entry ([email protected])
https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20111109_00 Patch, Vendor Advisory ([email protected])
http://www.securityfocus.com/bid/47822 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20111109_00 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)