CVE-2006-4266

CVE-2006-4266 describes a vulnerability in Symantec Norton Personal Firewall 2006 (and potentially earlier versions) where it fails to adequately protect its own registry keys. This allows a local user with administrative privileges to inject malicious libraries, such as NISProd.dll, by manipulating the HKLM\SOFTWARE\Symantec\CCPD\SuiteOwners registry key. While requiring administrative access, this is considered a vulnerability because the product's function is to protect against such actions, leading to a CVSS score of 3.6 with potential for partial confidentiality and integrity impact. There is no evidence of active exploitation, public exploit code, or significant community discussion for this vulnerability.