What is CVE-2011-3477?

CVE-2011-3477 is a medium-severity vulnerability in Symantec Backup_exec_system_recovery, classified under Improper Input Validation. CVSS score: 5.5/10. Published 2018-02-19.

How severe is CVE-2011-3477?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Improper input validation in Symantec Backup_exec_system_recovery

CVE-2011-3477

GEAR Software CD DVD Filter driver (aka GEARAspiWDM.sys), as used in Symantec Backup Exec System Recovery 8.5 and BESR 2010, Symantec System Recovery 2011, Norton 360, and Norton Ghost, allows local users to cause a denial of service (syst…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.006 (46.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Symantec Backup_exec_system_recovery — versions 8.5, 9.0, 2010
Symantec Norton_360 — versions 5.0
Symantec Norton_ghost
Symantec System_recovery_2011 — versions 10.0
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2011-3477?: CVE-2011-3477 is a medium-severity vulnerability in Symantec Backup_exec_system_recovery, classified under Improper Input Validation. CVSS score: 5.5/10. Published 2018-02-19.
How severe is CVE-2011-3477?: Medium severity. CVSS v3 base score is 5.5 out of 10.