CVE

Id
28404  
CVE No.
CVE-2007-5047  
Status
Candidate  
Description
Norton Internet Security 2008 15.0.0.60 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the NtOpenSection kernel SSDT hook. NOTE: the NtCreateMutant and NtOpenEvent function hooks are already covered by CVE-2007-1793.  
Phase
Assigned (20070923)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
295168 28404 CVE-2007-5047 BUGTRAQ:20070918 Plague in (security) software drivers & BSDOhook utility  View
295169 28404 CVE-2007-5047 URL:http://www.securityfocus.com/archive/1/archive/1/479830/100/0/threaded  View
295170 28404 CVE-2007-5047 MISC:http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php  View
295171 28404 CVE-2007-5047 MISC:http://www.matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php  View
295172 28404 CVE-2007-5047 OSVDB:45897  View
295173 28404 CVE-2007-5047 URL:http://osvdb.org/45897  View
295174 28404 CVE-2007-5047 SREASON:3161  View

Related JVN