PT-2007-6151 · Symantec · Norton Internet Security

Published 2007-09-24 · Updated 2018-10-15 · CVE-2007-5047

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Norton Internet Security 2008 version 15.0.0.60

Description The issue is related to the improper validation of certain parameters to System Service Descriptor Table (SSDT) function handlers. This can be exploited by local users to cause a denial of service, potentially leading to a crash, and may also allow them to gain privileges. The NtOpenSection kernel SSDT hook is specifically affected.

Recommendations For Norton Internet Security 2008 version 15.0.0.60, consider restricting access to the NtOpenSection kernel SSDT hook as a temporary mitigation measure until a patch is available.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2007-5047

Affected Products

Norton Internet Security

References · 6

• http://matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php · Vendor Advisory
• http://matousec.com/info/advisories/plague-in-security-software-drivers.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-5047 · Security Note
• http://securityfocus.com/archive/1/479830/100/0/threaded · Note
• http://osvdb.org/45897 · Note
• http://securityreason.com/securityalert/3161 · Note