NVD

Id
65703  
Name
CVE-2006-7160  
Description
The Sandbox.sys driver in Outpost Firewall PRO 4.0, and possibly earlier versions, does not validate arguments to hooked SSDT functions, which allows local users to cause a denial of service (crash) via invalid arguments to the (1) NtAssignProcessToJobObject,, (2) NtCreateKey, (3) NtCreateThread, (4) NtDeleteFile, (5) NtLoadDriver, (6) NtOpenProcess, (7) NtProtectVirtualMemory, (8) NtReplaceKey, (9) NtTerminateProcess, (10) NtTerminateThread, (11) NtUnloadDriver, and (12) NtWriteVirtualMemory functions.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2016-12-20  
Published
2007-03-07  
Modified Date
2011-06-16  
Seq
2006-7160  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
342189 65703 CVE-2006-7160 2376  View
342190 65703 CVE-2006-7160 http://www.matousec.com/info/advisories/Outpost-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php  View
342191 65703 CVE-2006-7160 20061115 Outpost Multiple insufficient argument validation of hooked SSDT function Vulnerability  View
342192 65703 CVE-2006-7160 21097  View
342193 65703 CVE-2006-7160 ADV-2006-4537  View
342194 65703 CVE-2006-7160 outpostfirewall-multiple-functions-dos(30312)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52605 JVNDB-2007-001297 Outpost Firewall PRO の sandbox.sys ドライバにおけるサービス運用妨害 (DoS) の脆弱性 Outpost Firewall PRO の sandbox.sys ドライバは、フックされた SSDT 関数への引数を検証しないため、サービス運用妨害 (クラッシュ) 状態となる脆弱性が存在します。 CVE-2006-7160 23262 CVE-2006-7160 65703 4.9 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001297.html 2007-03-07 2012-06-26 View