CVE-2007-1495: symantec norton_personal_firewall
Vulnerability summary
CVE-2007-1495 is a medium (CVSS 4.9) vulnerability in symantec norton_personal_firewall. EPSS estimates a 0.43% chance of exploitation in the next 30 days, higher than 35.3% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 16-03-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.1.7, and possibly other products using symevent.sys 12.0.0.20, allows local users to cause a denial of service (system crash) via invalid data, as demonstrated by calling DeviceIoControl to send the data, a reintroduction of CVE-2006-4855.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.43%
Chance of exploitation in the next 30 days
Percentile
35%
Versus all other CVEs
30-day change
+0.02 pp
From 0.40% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (securityfocus.com)
Maturity: unknown
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Symantec1 product
- norton_personal_firewall2006_9.1.1.7
1 vendor · 1 product