CVE-2007-1793

Severity: medium (CVSS 4.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-04-02 · updated 2026-06-16
Weakness: CWE-20

Description

SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate certain arguments before being passed to hooked SSDT function handlers, which allows local users to cause a denial of service (crash) or possibly execute arbitrary code via crafted arguments to the (1) NtCreateMutant and (2) NtOpenEvent functions. NOTE: it was later reported that Norton Internet Security 2008 15.0.0.60, and possibly other versions back to 2006, are also affected.

Affected products

Symantec Antivirus: 10.0, 10.0.1, 10.0.1.1, 10.0.2, 10.0.2.1, 10.0.2.2 (+7)
Symantec Client Security: 3.0, 3.0.0.359, 3.0.1.1000, 3.0.1.1001, 3.0.1.1007, 3.0.1.1008 (+16)
Symantec Norton 360: 1.0
Symantec Norton Antispam: 2004, 2005
Symantec Norton Antivirus: 2004, 2005, 2006, 2007, 2008
Symantec Norton Internet Security: 2004, 2005, 2006, 2007, 2008
Symantec Norton Personal Firewall: 2004, 2005, 2006, 2006_9.1.0.33, 2006_9.1.1.7
Symantec Norton System Works: 2004, 2005, 2006

References

Get alerted when CVE-2007-1793 or the next vulnerability affects your stack