PT-2007-2621 · Norman · Norman Sandbox Analyzer

Publicado 2007-03-02 · Atualizado 2018-10-16 · CVE-2007-1194

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Norman SandBox Analyzer (affected versions not specified)

Description The issue allows local users to determine if they are running in an emulator or a non-physical Intel processor environment, which can aid attackers in creating malware that is harder to analyze. This is due to the improper handling of Interrupt Descriptor Table (IDT) entries.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2007-1194

Produtos afetados

Norman Sandbox Analyzer

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2007-1194 · Nota de Segurança
• http://securityfocus.com/archive/1/461555/100/0/threaded · Nota
• http://osvdb.org/34955 · Nota
• http://securityfocus.com/archive/1/461804/100/100/threaded · Nota
• http://securityfocus.com/archive/1/461805/100/100/threaded · Nota
• http://ntsecurity.nu/onmymind/2007/2007-02-27.html · Nota