CVE-2007-1793 SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate certain arguments before being passed to hooked SSDT function handlers, which allows local users to cause....
MediumCVSS 4.9
EPSS 1.7%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate certain arguments before being passed to hooked SSDT function handlers, which allows local users to cause a denial of service (crash) or possibly execute arbitrary code via crafted arguments to the (1) NtCreateMutant and (2) NtOpenEvent functions. NOTE: it was later reported that Norton Internet Security 2008 15.0.0.60, and possibly other versions back to 2006, are also affected.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec antivirus | = 10.0 | No fix listed |
| symantec antivirus | = 10.0.1 | No fix listed |
| symantec antivirus | = 10.0.1.1 | No fix listed |
| symantec antivirus | = 10.0.2 | No fix listed |
| symantec antivirus | = 10.0.2.1 | No fix listed |
| symantec antivirus | = 10.0.2.2 | No fix listed |
| symantec antivirus | = 10.0.3 | No fix listed |
| symantec antivirus | = 10.0.4 | No fix listed |
| symantec antivirus | = 10.0.5 | No fix listed |
| symantec antivirus | = 10.0.6 | No fix listed |
| symantec antivirus | = 10.0.7 | No fix listed |
| symantec antivirus | = 10.0.8 | No fix listed |
| symantec antivirus | = 10.0.9 | No fix listed |
| symantec client security | = 3.0 | No fix listed |
| symantec client security | = 3.0.0.359 | No fix listed |
| symantec client security | = 3.0.1.1000 | No fix listed |
| symantec client security | = 3.0.1.1001 | No fix listed |
| symantec client security | = 3.0.1.1007 | No fix listed |
| symantec client security | = 3.0.1.1008 | No fix listed |
| symantec client security | = 3.0.1.1009 | No fix listed |
| symantec client security | = 3.0.2 | No fix listed |
| symantec client security | = 3.0.2.2000 | No fix listed |
| symantec client security | = 3.0.2.2001 | No fix listed |
| symantec client security | = 3.0.2.2002 | No fix listed |
| symantec client security | = 3.0.2.2010 | No fix listed |
Show 31 more
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec client security | = 3.0.2.2011 | No fix listed |
| symantec client security | = 3.0.2.2020 | No fix listed |
| symantec client security | = 3.0.2.2021 | No fix listed |
| symantec client security | = 3.1 | No fix listed |
| symantec client security | = 3.1.0.396 | No fix listed |
| symantec client security | = 3.1.0.401 | No fix listed |
| symantec client security | = 3.1.394 | No fix listed |
| symantec client security | = 3.1.396 | No fix listed |
| symantec client security | = 3.1.400 | No fix listed |
| symantec client security | = 3.1.401 | No fix listed |
| symantec norton 360 | = 1.0 | No fix listed |
| symantec norton antispam | = 2004 | No fix listed |
| symantec norton antispam | = 2005 | No fix listed |
| symantec norton antivirus | = 2004 | No fix listed |
| symantec norton antivirus | = 2005 | No fix listed |
| symantec norton antivirus | = 2006 | No fix listed |
| symantec norton antivirus | = 2007 | No fix listed |
| symantec norton antivirus | = 2008 | No fix listed |
| symantec norton internet security | = 2004 | No fix listed |
| symantec norton internet security | = 2005 | No fix listed |
| symantec norton internet security | = 2006 | No fix listed |
| symantec norton internet security | = 2007 | No fix listed |
| symantec norton internet security | = 2008 | No fix listed |
| symantec norton personal firewall | = 2004 | No fix listed |
| symantec norton personal firewall | = 2005 | No fix listed |
| symantec norton personal firewall | = 2006 | No fix listed |
| symantec norton personal firewall | = 2006_9.1.0.33 | No fix listed |
| symantec norton personal firewall | = 2006_9.1.1.7 | No fix listed |
| symantec norton system works | = 2004 | No fix listed |
| symantec norton system works | = 2005 | No fix listed |
| symantec norton system works | = 2006 | No fix listed |
References
- 34692 vdb-entry
- 24677 third-party-advisory vendor-advisory
- securityresponse.symantec.com
- www.matousec.com vendor-advisory
- www.matousec.com
- www.matousec.com
- 20070401 Norton Multiple insufficient argument validation of hooked SSDT function Vulnerability mailing-list
- 20070918 Plague in (security) software drivers & BSDOhook utility mailing-list
- 23241 exploit vdb-entry
- 1017837 patch vdb-entry
- 1017838 patch vdb-entry
- 1021386 vdb-entry
- 1021387 vdb-entry
- 1021388 vdb-entry
- 1021389 vdb-entry
- ADV-2007-1192 vdb-entry vendor-advisory
- symantec-firewall-ssdt-dos(33352) vdb-entry