Norton Personal Firewall / Norton Internet Security privilege escalation
Published:		01.04.2007
Source:		FULL-DISCLOSURE
SecurityVulns ID:		7520
Type:		local
Level:		5/10
Description:		Invalid processing of hooked functions parameters.

Affected:		SYMANTEC : Norton Personal Firewall 2006
		SYMANTEC : Norton Internet Security 2006
CVE:		CVE-2007-1793 (SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate certain arguments before being passed to hooked SSDT function handlers, which allows local users to cause a denial of service (crash) or possibly execute arbitrary code via crafted arguments to the (1) NtCreateMutant and (2) NtOpenEvent functions.)

Original document

Matousec - Transparent security Research, [Full-disclosure] Norton Multiple insufficient argument validation of hooked SSDT function Vulnerability (01.04.2007)

Files:		Testing program for Multiple insufficient argument validation of hooked SSDT function (BTP00000P002NF)
Discuss:		Read or add your comments to this news (0 comments)