Symantec » Norton Internet Security : Security Vulnerabilities, CVEs, Published In 2007 (Denial of service) CVSS score >= 2
Norton Internet Security 2008 15.0.0.60 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the NtOpenSection kernel SSDT hook. NOTE: the NtCreateMutant and NtOpenEvent function hooks are already covered by CVE-2007-1793.
Max CVSS
7.2
EPSS Score
0.04%
Published
2007-09-24
Updated
2018-10-15
The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header.
Max CVSS
9.3
EPSS Score
4.40%
Published
2007-10-05
Updated
2012-10-31
SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate certain arguments before being passed to hooked SSDT function handlers, which allows local users to cause a denial of service (crash) or possibly execute arbitrary code via crafted arguments to the (1) NtCreateMutant and (2) NtOpenEvent functions. NOTE: it was later reported that Norton Internet Security 2008 15.0.0.60, and possibly other versions back to 2006, are also affected.
Max CVSS
4.9
EPSS Score
0.04%
Published
2007-04-02
Updated
2018-10-16
3 vulnerabilities found