CVE:CVE-2007-1793
CNNVD:CNNVD-200704-033
Symantec Norton个人防火墙是非常流行的防火墙软件。
Norton个人防火墙的驱动实现上存在漏洞，本地攻击者可能利用此漏洞对系统执行拒绝服务攻击。
Norton的SPBBCDrv.sys驱动没有正确验证某些钩子函数的参数，如果使用特制参数调用了NtCreateMutant或NtOpenEvent的话，就可能导致系统崩溃。
solution:Upgrade symantec antivirus to a higher version than 10.0,10.0.1,10.0.1.1,10.0.2,10.0.2.1,10.0.2.2,10.0.3,10.0.4,10.0.5,10.0.6,10.0.7,10.0.8,10.0.9,and avoid the version 10.0,10.0.1,10.0.1.1,10.0.2,10.0.2.1,10.0.2.2,10.0.3,10.0.4,10.0.5,10.0.6,10.0.7,10.0.8,10.0.9; Upgrade symantec client_security to a higher version than 3.0,3.0.0.359,3.0.1.1000,3.0.1.1001,3.0.1.1007,3.0.1.1008,3.0.1.1009,3.0.2,3.0.2.2000,3.0.2.2001,3.0.2.2002,3.0.2.2010,3.0.2.2011,3.0.2.2020,3.0.2.2021,3.1,3.1.0.396,3.1.0.401,3.1.394,3.1.396,3.1.400,3.1.401,and avoid the version 3.0,3.0.0.359,3.0.1.1000,3.0.1.1001,3.0.1.1007,3.0.1.1008,3.0.1.1009,3.0.2,3.0.2.2000,3.0.2.2001,3.0.2.2002,3.0.2.2010,3.0.2.2011,3.0.2.2020,3.0.2.2021,3.1,3.1.0.396,3.1.0.401,3.1.394,3.1.396,3.1.400,3.1.401; Upgrade symantec norton_360 to a higher version than 1.0,and avoid the version 1.0; Upgrade symantec norton_antispam to a higher version than 2004,2005,and avoid the version 2004,2005; Upgrade symantec norton_antivirus to a higher version than 2004,2005,2006,2007,2008,and avoid the version 2004,2005,2006,2007,2008; Upgrade symantec norton_internet_security to a higher version than 2004,2005,2006,2007,2008,and avoid the version 2004,2005,2006,2007,2008; Upgrade symantec norton_personal_firewall to a higher version than 2004,2005,2006,2006_9.1.0.33,2006_9.1.1.7,and avoid the version 2004,2005,2006,2006_9.1.0.33,2006_9.1.1.7; Upgrade symantec norton_system_works to a higher version than 2004,2005,2006,and avoid the version 2004,2005,2006