CVE-2007-1495: The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.1.7, and possibly other products...

Security readout for executives and security teams

This is a local denial-of-service issue in Symantec's SymEvent driver. A user who already has local access can send invalid data to the driver and crash the system. The sources name Norton Personal Firewall 2006 9.1.1.7 and possibly other products using symevent.sys 12.0.0.20. Exposure is most likely on legacy Windows systems running Norton Personal Firewall 2006 9.1.1.7 or another Symantec product that installed symevent.sys 12.0.0.20. Internet-facing exposure is not indicated; the reported attacker position is local access. Treat this as a legacy availability risk, not a remote compromise emergency. Prioritize systems where a local crash would disrupt business operations or where many users can log in locally. Mitigation focus: Inventory systems for Norton Personal Firewall 2006 and symevent.sys 12.0.0.20.; Check Symantec or Norton guidance for fixed drivers or product updates.; Remove or replace unsupported legacy Symantec security products where feasible..

Prepared

Jun 29, 2026, 06:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.