CVEvulnerability
CVE-2007-1194
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2007-03-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
Norman SandBox Analyzer does not use the proper range for Interrupt Descriptor Table (IDT) entries, which allows local users to determine that the local machine is an emulator, or a similar environment not based on a physical Intel processor, which allows attackers to produce malware that is more difficult to analyze.
Affected configurations
• norman norman sandbox analyzer
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://osvdb.org/34955 osvdb.org
- http://www.ntsecurity.nu/onmymind/2007/2007-02-27.html www.ntsecurity.nu
- http://www.securityfocus.com/archive/1/461555/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/461804/100/100/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/461805/100/100/threaded www.securityfocus.com
- http://osvdb.org/34955 osvdb.org
- http://www.ntsecurity.nu/onmymind/2007/2007-02-27.html www.ntsecurity.nu
- http://www.securityfocus.com/archive/1/461555/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/461804/100/100/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/461805/100/100/threaded www.securityfocus.com