CVE-2007-1793

CVSS V2 Medium 4.9 CVSS V3 None
Description
SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate certain arguments before being passed to hooked SSDT function handlers, which allows local users to cause a denial of service (crash) or possibly execute arbitrary code via crafted arguments to the (1) NtCreateMutant and (2) NtOpenEvent functions. NOTE: it was later reported that Norton Internet Security 2008 15.0.0.60, and possibly other versions back to 2006, are also affected.
Overview
  • CVE ID
  • CVE-2007-1793
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Modified
  • Published Version
  • 2007-04-02T22:19:00
  • Last Modified Date
  • 2018-10-16T16:40:48
Weakness Enumerations
CWE URL
CWE-20 http://cwe.mitre.org/data/definitions/20.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:symantec:antivirus:10.0:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:antivirus:10.0.1:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:antivirus:10.0.1.1:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:antivirus:10.0.2:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:antivirus:10.0.2.1:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:antivirus:10.0.2.2:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:antivirus:10.0.3:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:antivirus:10.0.4:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:antivirus:10.0.5:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:antivirus:10.0.6:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:antivirus:10.0.7:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:antivirus:10.0.8:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:antivirus:10.0.9:*:corporate:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.0.0.359:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.0.1.1000:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.0.1.1001:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.0.1.1007:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.0.1.1008:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.0.1.1009:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.0.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.0.2.2000:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.0.2.2001:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.0.2.2002:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.0.2.2010:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.0.2.2011:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.0.2.2020:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.0.2.2021:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.1.0.396:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.1.0.401:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.1.394:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.1.396:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.1.400:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:client_security:3.1.401:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_360:1.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antispam:2004:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antispam:2005:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:2004:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:2005:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:2006:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:2007:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_antivirus:2008:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_internet_security:2004:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_internet_security:2005:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_internet_security:2006:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_internet_security:2007:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_internet_security:2008:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_personal_firewall:2004:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_personal_firewall:2005:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_personal_firewall:2006:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_personal_firewall:2006_9.1.0.33:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_personal_firewall:2006_9.1.1.7:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_system_works:2004:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_system_works:2005:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:symantec:norton_system_works:2006:*:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:L/AC:L/Au:N/C:N/I:N/A:C
  • Access Vector
  • LOCAL
  • Access Compatibility
  • LOW
  • Authentication
  • NONE
  • Confidentiality Impact
  • NONE
  • Integrity Impact
  • NONE
  • Availability Impact
  • COMPLETE
  • Base Score
  • 4.9
  • Severity
  • MEDIUM
  • Exploitability Score
  • 3.9
  • Impact Score
  • 6.9
References
Reference URL Reference Tags
http://www.matousec.com/info/advisories/Norton-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php Vendor Advisory
http://secunia.com/advisories/24677 Vendor Advisory
http://www.securityfocus.com/bid/23241 Exploit
http://www.securitytracker.com/id?1017837 Patch
http://www.securitytracker.com/id?1017838 Patch
http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php
http://www.matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php
http://osvdb.org/34692
http://www.securitytracker.com/id?1021388
http://www.securitytracker.com/id?1021389
http://securityresponse.symantec.com/avcenter/security/Content/2008.12.12.html
http://www.securitytracker.com/id?1021386
http://www.securitytracker.com/id?1021387
http://www.vupen.com/english/advisories/2007/1192 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/33352
http://www.securityfocus.com/archive/1/479830/100/0/threaded
http://www.securityfocus.com/archive/1/464456/100/0/threaded
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2007-1793
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1793
History
Created Old Value New Value Data Type Notes
2022-05-10 18:15:56 Added to TrackCVE