CVE-2007-1793

Published: Apr 2, 2007Modified: Apr 23, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate certain arguments before being passed to hooked SSDT function handlers, which allows local users to cause a denial of service (crash) or possibly execute arbitrary code via crafted arguments to the (1) NtCreateMutant and (2) NtOpenEvent functions. NOTE: it was later reported that Norton Internet Security 2008 15.0.0.60, and possibly other versions back to 2006, are also affected.

Affected (56)

Products: Symantec: Antivirus, Client Security, Norton 360, Norton Antispam, Norton Antivirus, Norton Internet Security, Norton Personal Firewall, Norton System Works

8 products

Norton Internet Security

Norton Personal Firewall

Norton System Works

Configuration A

56 vulnerable

Vulnerable Software	Affected Versions
Symantec Antivirus	Version 10.0.1.1
Symantec Antivirus	Version 10.0.1
Symantec Antivirus	Version 10.0.2.1
Symantec Antivirus	Version 10.0.2.2
Symantec Antivirus	Version 10.0.2
Symantec Antivirus	Version 10.0.3
Symantec Antivirus	Version 10.0.4
Symantec Antivirus	Version 10.0.5
Symantec Antivirus	Version 10.0.6
Symantec Antivirus	Version 10.0.7
Symantec Antivirus	Version 10.0.8
Symantec Antivirus	Version 10.0.9
Symantec Antivirus	Version 10.0
Symantec Client Security	Version 3.0.0.359
Symantec Client Security	Version 3.0.1.1000
Symantec Client Security	Version 3.0.1.1001
Symantec Client Security	Version 3.0.1.1007
Symantec Client Security	Version 3.0.1.1008
Symantec Client Security	Version 3.0.1.1009
Symantec Client Security	Version 3.0.2.2000
Symantec Client Security	Version 3.0.2.2001
Symantec Client Security	Version 3.0.2.2002
Symantec Client Security	Version 3.0.2.2010
Symantec Client Security	Version 3.0.2.2011
Symantec Client Security	Version 3.0.2.2020
Symantec Client Security	Version 3.0.2.2021
Symantec Client Security	Version 3.0.2
Symantec Client Security	Version 3.0
Symantec Client Security	Version 3.1.0.396
Symantec Client Security	Version 3.1.0.401
Symantec Client Security	Version 3.1.394
Symantec Client Security	Version 3.1.396
Symantec Client Security	Version 3.1.400
Symantec Client Security	Version 3.1.401
Symantec Client Security	Version 3.1
Symantec Norton 360	Version 1.0
Symantec Norton Antispam	Version 2004
Symantec Norton Antispam	Version 2005
Symantec Norton Antivirus	Version 2004
Symantec Norton Antivirus	Version 2005
Symantec Norton Antivirus	Version 2006
Symantec Norton Antivirus	Version 2007
Symantec Norton Antivirus	Version 2008
Symantec Norton Internet Security	Version 2004
Symantec Norton Internet Security	Version 2005
Symantec Norton Internet Security	Version 2006
Symantec Norton Internet Security	Version 2007
Symantec Norton Internet Security	Version 2008
Symantec Norton Personal Firewall	Version 2004
Symantec Norton Personal Firewall	Version 2005
Symantec Norton Personal Firewall	Version 2006
Symantec Norton Personal Firewall	Version 2006_9.1.0.33
Symantec Norton Personal Firewall	Version 2006_9.1.1.7
Symantec Norton System Works	Version 2004
Symantec Norton System Works	Version 2005
Symantec Norton System Works	Version 2006