CVE-2006-7160

Description

The Sandbox.sys driver in Outpost Firewall PRO 4.0, and possibly earlier versions, does not validate arguments to hooked SSDT functions, which allows local users to cause a denial of service (crash) via invalid arguments to the (1) NtAssignProcessToJobObject,, (2) NtCreateKey, (3) NtCreateThread, (4) NtDeleteFile, (5) NtLoadDriver, (6) NtOpenProcess, (7) NtProtectVirtualMemory, (8) NtReplaceKey, (9) NtTerminateProcess, (10) NtTerminateThread, (11) NtUnloadDriver, and (12) NtWriteVirtualMemory functions.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/30312

http://www.vupen.com/english/advisories/2006/4537

http://www.securityfocus.com/bid/21097

http://www.securityfocus.com/archive/1/451672/100/0/threaded

http://www.matousec.com/info/advisories/Outpost-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php

http://securityreason.com/securityalert/2376

http://secunia.com/advisories/22913

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS