4.9
CVE-2007-1793
- EPSS 1.72%
- Veröffentlicht 02.04.2007 22:19:00
- Zuletzt bearbeitet 16.06.2026 22:38:18
- Erkennungen
LoginSPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate certain arguments before being passed to hooked SSDT function handlers, which allows local users to cause a denial of service (crash) or possibly execute arbitrary code via crafted arguments to the (1) NtCreateMutant and (2) NtOpenEvent functions. NOTE: it was later reported that Norton Internet Security 2008 15.0.0.60, and possibly other versions back to 2006, are also affected.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Symantec ≫ Client Security Version 3.0
Symantec ≫ Client Security Version 3.0.0.359
Symantec ≫ Client Security Version 3.0.1.1000
Symantec ≫ Client Security Version 3.0.1.1001
Symantec ≫ Client Security Version 3.0.1.1007
Symantec ≫ Client Security Version 3.0.1.1008
Symantec ≫ Client Security Version 3.0.1.1009
Symantec ≫ Client Security Version 3.0.2
Symantec ≫ Client Security Version 3.0.2.2000
Symantec ≫ Client Security Version 3.0.2.2001
Symantec ≫ Client Security Version 3.0.2.2002
Symantec ≫ Client Security Version 3.0.2.2010
Symantec ≫ Client Security Version 3.0.2.2011
Symantec ≫ Client Security Version 3.0.2.2020
Symantec ≫ Client Security Version 3.0.2.2021
Symantec ≫ Client Security Version 3.1
Symantec ≫ Client Security Version 3.1.0.396
Symantec ≫ Client Security Version 3.1.0.401
Symantec ≫ Client Security Version 3.1.394
Symantec ≫ Client Security Version 3.1.396
Symantec ≫ Client Security Version 3.1.400
Symantec ≫ Client Security Version 3.1.401
Symantec ≫ Norton 360 Version 1.0
Symantec ≫ Norton Antispam Version 2004
Symantec ≫ Norton Antispam Version 2005
Symantec ≫ Norton Antivirus Version 2004
Symantec ≫ Norton Antivirus Version 2005
Symantec ≫ Norton Antivirus Version 2006
Symantec ≫ Norton Antivirus Version 2007
Symantec ≫ Norton Antivirus Version 2008
Symantec ≫ Norton Internet Security Version 2004
Symantec ≫ Norton Internet Security Version 2005
Symantec ≫ Norton Internet Security Version 2006
Symantec ≫ Norton Internet Security Version 2007
Symantec ≫ Norton Internet Security Version 2008
Symantec ≫ Norton Personal Firewall Version 2004
Symantec ≫ Norton Personal Firewall Version 2005
Symantec ≫ Norton Personal Firewall Version 2006
Symantec ≫ Norton Personal Firewall Version 2006_9.1.0.33
Symantec ≫ Norton Personal Firewall Version 2006_9.1.1.7
Symantec ≫ Norton System Works Version 2004
Symantec ≫ Norton System Works Version 2005
Symantec ≫ Norton System Works Version 2006
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.72% | 0.745 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 4.9 | 3.9 | 6.9 |
AV:L/AC:L/Au:N/C:N/I:N/A:C
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php
http://www.matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php
http://www.securityfocus.com/archive/1/479830/100/0/threaded
http://osvdb.org/34692
http://secunia.com/advisories/24677
http://securityresponse.symantec.com/avcenter/security/Content/2008.12.12.html
http://www.matousec.com/info/advisories/Norton-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php
http://www.securityfocus.com/archive/1/464456/100/0/threaded
http://www.securityfocus.com/bid/23241
http://www.securitytracker.com/id?1017837
http://www.securitytracker.com/id?1017838
http://www.securitytracker.com/id?1021386
http://www.securitytracker.com/id?1021387
http://www.securitytracker.com/id?1021388
http://www.securitytracker.com/id?1021389
http://www.vupen.com/english/advisories/2007/1192
https://exchange.xforce.ibmcloud.com/vulnerabilities/33352