CVE-2007-1793

SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate certain arguments before being passed to hooked SSDT function handlers, which allows local users to cause a denial of service (crash) or possibly execute arbitrary code via crafted arguments to the (1) NtCreateMutant and (2) NtOpenEvent functions. NOTE: it was later reported that Norton Internet Security 2008 15.0.0.60, and possibly other versions back to 2006, are also affected.

• symantec antivirus 10.0 • symantec antivirus 10.0.1 • symantec antivirus 10.0.1.1 • symantec antivirus 10.0.2 • symantec antivirus 10.0.2.1 • symantec antivirus 10.0.2.2 • symantec antivirus 10.0.3 • symantec antivirus 10.0.4 • symantec antivirus 10.0.5 • symantec antivirus 10.0.6 • symantec antivirus 10.0.7 • symantec antivirus 10.0.8 • symantec antivirus 10.0.9 • symantec client security 3.0 • symantec client security 3.0.0.359 • symantec client security 3.0.1.1000 • symantec client security 3.0.1.1001 • symantec client security 3.0.1.1007 • symantec client security 3.0.1.1008 • symantec client security 3.0.1.1009 • symantec client security 3.0.2 • symantec client security 3.0.2.2000 • symantec client security 3.0.2.2001 • symantec client security 3.0.2.2002 • symantec client security 3.0.2.2010 • symantec client security 3.0.2.2011 • symantec client security 3.0.2.2020 • symantec client security 3.0.2.2021 • symantec client security 3.1 • symantec client security 3.1.0.396 • symantec client security 3.1.0.401 • symantec client security 3.1.394 • symantec client security 3.1.396 • symantec client security 3.1.400 • symantec client security 3.1.401 • symantec norton 360 1.0 • symantec norton antispam 2004 • symantec norton antispam 2005 • symantec norton antivirus 2004 • symantec norton antivirus 2005 • symantec norton antivirus 2006 • symantec norton antivirus 2007 • symantec norton antivirus 2008 • symantec norton internet security 2004 • symantec norton internet security 2005 • symantec norton internet security 2006 • symantec norton internet security 2007 • symantec norton internet security 2008 • symantec norton personal firewall 2004 • symantec norton personal firewall 2005 • symantec norton personal firewall 2006 • symantec norton personal firewall 2006 9.1.0.33 • symantec norton personal firewall 2006 9.1.1.7 • symantec norton system works 2004 • symantec norton system works 2005 • symantec norton system works 2006