Vulnerability Description
The Sandbox.sys driver in Outpost Firewall PRO 4.0, and possibly earlier versions, does not validate arguments to hooked SSDT functions, which allows local users to cause a denial of service (crash) via invalid arguments to the (1) NtAssignProcessToJobObject,, (2) NtCreateKey, (3) NtCreateThread, (4) NtDeleteFile, (5) NtLoadDriver, (6) NtOpenProcess, (7) NtProtectVirtualMemory, (8) NtReplaceKey, (9) NtTerminateProcess, (10) NtTerminateThread, (11) NtUnloadDriver, and (12) NtWriteVirtualMemory functions.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Agnitum | Outpost Firewall | <= 4.0 |
Related Weaknesses (CWE)
References
- http://secunia.com/advisories/22913Vendor Advisory
- http://securityreason.com/securityalert/2376
- http://www.matousec.com/info/advisories/Outpost-Multiple-insufficient-argument-vVendor Advisory
- http://www.securityfocus.com/archive/1/451672/100/0/threaded
- http://www.securityfocus.com/bid/21097
- http://www.vupen.com/english/advisories/2006/4537Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30312
- http://secunia.com/advisories/22913Vendor Advisory
- http://securityreason.com/securityalert/2376
- http://www.matousec.com/info/advisories/Outpost-Multiple-insufficient-argument-vVendor Advisory
- http://www.securityfocus.com/archive/1/451672/100/0/threaded
- http://www.securityfocus.com/bid/21097
- http://www.vupen.com/english/advisories/2006/4537Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30312
FAQ
What is CVE-2006-7160?
CVE-2006-7160 is a vulnerability with a CVSS score of 4.9 (MEDIUM). The Sandbox.sys driver in Outpost Firewall PRO 4.0, and possibly earlier versions, does not validate arguments to hooked SSDT functions, which allows local users to cause a denial of service (crash) v...
How severe is CVE-2006-7160?
CVE-2006-7160 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2006-7160?
Check the references section above for vendor advisories and patch information. Affected products include: Agnitum Outpost Firewall.