PT-2007-6151 · Symantec · Norton Internet Security

Publicado 2007-09-24 · Atualizado 2018-10-15 · CVE-2007-5047

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Norton Internet Security 2008 version 15.0.0.60

Description The issue is related to the improper validation of certain parameters to System Service Descriptor Table (SSDT) function handlers. This can be exploited by local users to cause a denial of service, potentially leading to a crash, and may also allow them to gain privileges. The NtOpenSection kernel SSDT hook is specifically affected.

Recommendations For Norton Internet Security 2008 version 15.0.0.60, consider restricting access to the NtOpenSection kernel SSDT hook as a temporary mitigation measure until a patch is available.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2007-5047

Produtos afetados

Norton Internet Security

Referências · 6

• http://matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php · Aviso do Fabricante
• http://securityfocus.com/archive/1/479830/100/0/threaded · Nota
• http://matousec.com/info/advisories/plague-in-security-software-drivers.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-5047 · Nota de Segurança
• http://osvdb.org/45897 · Nota
• http://securityreason.com/securityalert/3161 · Nota