CVE-2006-6308

CVE-2006-6308 describes a potential privilege escalation vulnerability in Symantec LiveState 7.1 Agent for Windows. A local, authenticated user might gain elevated privileges by stopping the shstart.exe process and then launching "Web Self-Service" from the system tray, causing a browser to open with elevated permissions. However, the severity is mitigated by the strong possibility that administrator privileges are already required to terminate shstart.exe, which would negate any privilege escalation. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.