CVE-2003-1310 json
The DeviceIoControl function in the Norton Device Driver (NAVAP.sys) in Symantec Norton AntiVirus 2002 allows local users to gain privilege…
published 2003-12-31 22 y ago modified 2026-06-16 4 mo ago also EUVD-2003-1300
- cvss
- 4.6
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.2%
- EPSS 1.2% chance of exploitation in 30 days, percentile 68%
- public exploits
- 1
- Exploit-DB
Summary
The DeviceIoControl function in the Norton Device Driver (NAVAP.sys) in Symantec Norton AntiVirus 2002 allows local users to gain privileges by overwriting memory locations via certain control codes (aka "Device Driver Attack").
Timeline
- First public exploit (EDB-22980)
- Published
Exploit prediction
1.21% chance of exploitation in the next 30 days, higher than 68% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-22980 Symantec Norton AntiVirus 2002/2003 - Device Driver Memory Overwrite local, 2003-08-02
- securityfocus.com http://www.securityfocus.com/bid/8329 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 4.6 | AV:L/AC:L/Au:N/C:P/I:P/A:P |
References
-
securityfocus.com
/bid/8329
vdb-entry, exploit
-
secunia.com
/advisories/9460
third-party-advisory, vendor-advisory
-
osvdb.org
/4362
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/12824
vdb-entry
- sec-labs.hack.pl /papers/win32ddc.php
Sources
- CVE List CVE-2003-1310
- NVD CVE-2003-1310
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.