SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate certain arguments before being passed to hooked SSDT function handlers, which allows local users to cause a denial of service (crash) or possibly execute arbitrary code via crafted arguments to the (1) NtCreateMutant and (2) NtOpenEvent functions. NOTE: it was later reported that Norton Internet Security 2008 15.0.0.60, and possibly other versions back to 2006, are also affected.
2007-04-02T22:19:00.000
2025-04-09T00:30:58.490
Deferred
CVSSv2: 4.9 (MEDIUM)
AV:L/AC:L/Au:N/C:N/I:N/A:C
3.9
6.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | symantec | antivirus | 10.0 | Yes |
| Application | symantec | antivirus | 10.0.1 | Yes |
| Application | symantec | antivirus | 10.0.1.1 | Yes |
| Application | symantec | antivirus | 10.0.2 | Yes |
| Application | symantec | antivirus | 10.0.2.1 | Yes |
| Application | symantec | antivirus | 10.0.2.2 | Yes |
| Application | symantec | antivirus | 10.0.3 | Yes |
| Application | symantec | antivirus | 10.0.4 | Yes |
| Application | symantec | antivirus | 10.0.5 | Yes |
| Application | symantec | antivirus | 10.0.6 | Yes |
| Application | symantec | antivirus | 10.0.7 | Yes |
| Application | symantec | antivirus | 10.0.8 | Yes |
| Application | symantec | antivirus | 10.0.9 | Yes |
| Application | symantec | client_security | 3.0 | Yes |
| Application | symantec | client_security | 3.0.0.359 | Yes |
| Application | symantec | client_security | 3.0.1.1000 | Yes |
| Application | symantec | client_security | 3.0.1.1001 | Yes |
| Application | symantec | client_security | 3.0.1.1007 | Yes |
| Application | symantec | client_security | 3.0.1.1008 | Yes |
| Application | symantec | client_security | 3.0.1.1009 | Yes |
| Application | symantec | client_security | 3.0.2 | Yes |
| Application | symantec | client_security | 3.0.2.2000 | Yes |
| Application | symantec | client_security | 3.0.2.2001 | Yes |
| Application | symantec | client_security | 3.0.2.2002 | Yes |
| Application | symantec | client_security | 3.0.2.2010 | Yes |
| Application | symantec | client_security | 3.0.2.2011 | Yes |
| Application | symantec | client_security | 3.0.2.2020 | Yes |
| Application | symantec | client_security | 3.0.2.2021 | Yes |
| Application | symantec | client_security | 3.1 | Yes |
| Application | symantec | client_security | 3.1.0.396 | Yes |
| Application | symantec | client_security | 3.1.0.401 | Yes |
| Application | symantec | client_security | 3.1.394 | Yes |
| Application | symantec | client_security | 3.1.396 | Yes |
| Application | symantec | client_security | 3.1.400 | Yes |
| Application | symantec | client_security | 3.1.401 | Yes |
| Application | symantec | norton_360 | 1.0 | Yes |
| Application | symantec | norton_antispam | 2004 | Yes |
| Application | symantec | norton_antispam | 2005 | Yes |
| Application | symantec | norton_antivirus | 2004 | Yes |
| Application | symantec | norton_antivirus | 2005 | Yes |
| Application | symantec | norton_antivirus | 2006 | Yes |
| Application | symantec | norton_antivirus | 2007 | Yes |
| Application | symantec | norton_antivirus | 2008 | Yes |
| Application | symantec | norton_internet_security | 2004 | Yes |
| Application | symantec | norton_internet_security | 2005 | Yes |
| Application | symantec | norton_internet_security | 2006 | Yes |
| Application | symantec | norton_internet_security | 2007 | Yes |
| Application | symantec | norton_internet_security | 2008 | Yes |
| Application | symantec | norton_personal_firewall | 2004 | Yes |
| Application | symantec | norton_personal_firewall | 2005 | Yes |
| Application | symantec | norton_personal_firewall | 2006 | Yes |
| Application | symantec | norton_personal_firewall | 2006_9.1.0.33 | Yes |
| Application | symantec | norton_personal_firewall | 2006_9.1.1.7 | Yes |
| Application | symantec | norton_system_works | 2004 | Yes |
| Application | symantec | norton_system_works | 2005 | Yes |
| Application | symantec | norton_system_works | 2006 | Yes |