Search/CVE-2006-3454

● CVE

CVE-2006-3454

VendorsymantecProductnorton antivirus, client securityDiscoveredSep 14, 2006UpdatedApr 16, 2026

Multiple format string vulnerabilities in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allow local users to execute arbitrary code via format strings in (1) Tamper Protection and (2) Virus Alert Notification messages.

View graph Watch Export

CVSS v3.1

—

EPSS

0.46%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

0

sources referencing this CVE

Related IOCs

0

seen in the same coverage

Connections

2 relationships

norton antivirus

client security

Timeline

disclosure → media coverage

Sep 14, 2006

Disclosure — published as a CVE record. · last revised by NVD Apr 16, 2026