SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate certain arguments before being passed to hooked SSDT function handlers, which allows local users to cause a denial of service (crash) or possibly execute arbitrary code via crafted arguments to the (1) NtCreateMutant and (2) NtOpenEvent functions. NOTE: it was later reported that Norton Internet Security 2008 15.0.0.60, and possibly other versions back to 2006, are also affected.
Conclusion & alert: CVE-2007-1793 is rated High Exploit Risk (62.1/100): CVSS Medium severity, with medium exploitation likelihood (EPSS 1.72%). Core evidence: 2 public exploit reference(s) are indexed (Exploit-DB). EPSS rose +1.46% over the last day, indicating growing attacker interest. Mandatory action: Public exploits are available—assess exposure, apply mitigations, and prioritize patching.
Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.
| EDB-ID | Source | Kind | Published | Link |
|---|---|---|---|---|
| 29810 | exploit_db | edb | 2007-04-01 | Exploit-DB ↗ |
| — | nvd_ref | exploit_tag | Exploit-DB ↗ |
EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).
| # | Date | Old EPSS score | New EPSS score | Delta (New - Old) |
|---|---|---|---|---|
| 1 | 2026-06-15 | 0.26% | 1.72% | +1.46% |
| 2 | 2025-03-30 | 0.18% | 0.26% | +0.08% |
| 3 | 2025-03-29 | — | 0.18% | — |
Full EPSS history (8 records total)
CVSS metrics for this CVE.
| Base score | Version | Severity | Vector | Exploitability | Impact | Score source |
|---|---|---|---|---|---|---|
| 4.9 | 2.0 | MEDIUM |
|
3.9 | 6.9 | [email protected] |
| Vendor | Product | Version | Raw CPE |
|---|---|---|---|
| symantec | antivirus | 10.0 | cpe:2.3:a:symantec:antivirus:10.0:*:corporate:*:*:*:*:* |
| symantec | antivirus | 10.0.1 | cpe:2.3:a:symantec:antivirus:10.0.1:*:corporate:*:*:*:*:* |
| symantec | antivirus | 10.0.1.1 | cpe:2.3:a:symantec:antivirus:10.0.1.1:*:corporate:*:*:*:*:* |
| symantec | antivirus | 10.0.2 | cpe:2.3:a:symantec:antivirus:10.0.2:*:corporate:*:*:*:*:* |
| symantec | antivirus | 10.0.2.1 | cpe:2.3:a:symantec:antivirus:10.0.2.1:*:corporate:*:*:*:*:* |
| symantec | antivirus | 10.0.2.2 | cpe:2.3:a:symantec:antivirus:10.0.2.2:*:corporate:*:*:*:*:* |
| symantec | antivirus | 10.0.3 | cpe:2.3:a:symantec:antivirus:10.0.3:*:corporate:*:*:*:*:* |
| symantec | antivirus | 10.0.4 | cpe:2.3:a:symantec:antivirus:10.0.4:*:corporate:*:*:*:*:* |
| symantec | antivirus | 10.0.5 | cpe:2.3:a:symantec:antivirus:10.0.5:*:corporate:*:*:*:*:* |
| symantec | antivirus | 10.0.6 | cpe:2.3:a:symantec:antivirus:10.0.6:*:corporate:*:*:*:*:* |
| symantec | antivirus | 10.0.7 | cpe:2.3:a:symantec:antivirus:10.0.7:*:corporate:*:*:*:*:* |
| symantec | antivirus | 10.0.8 | cpe:2.3:a:symantec:antivirus:10.0.8:*:corporate:*:*:*:*:* |
| symantec | antivirus | 10.0.9 | cpe:2.3:a:symantec:antivirus:10.0.9:*:corporate:*:*:*:*:* |
| symantec | client_security | 3.0 | cpe:2.3:a:symantec:client_security:3.0:*:*:*:*:*:*:* |
| symantec | client_security | 3.0.0.359 | cpe:2.3:a:symantec:client_security:3.0.0.359:*:*:*:*:*:*:* |
| symantec | client_security | 3.0.1.1000 | cpe:2.3:a:symantec:client_security:3.0.1.1000:*:*:*:*:*:*:* |
| symantec | client_security | 3.0.1.1001 | cpe:2.3:a:symantec:client_security:3.0.1.1001:*:*:*:*:*:*:* |
| symantec | client_security | 3.0.1.1007 | cpe:2.3:a:symantec:client_security:3.0.1.1007:*:*:*:*:*:*:* |
| symantec | client_security | 3.0.1.1008 | cpe:2.3:a:symantec:client_security:3.0.1.1008:*:*:*:*:*:*:* |
| symantec | client_security | 3.0.1.1009 | cpe:2.3:a:symantec:client_security:3.0.1.1009:*:*:*:*:*:*:* |
| symantec | client_security | 3.0.2 | cpe:2.3:a:symantec:client_security:3.0.2:*:*:*:*:*:*:* |
| symantec | client_security | 3.0.2.2000 | cpe:2.3:a:symantec:client_security:3.0.2.2000:*:*:*:*:*:*:* |
| symantec | client_security | 3.0.2.2001 | cpe:2.3:a:symantec:client_security:3.0.2.2001:*:*:*:*:*:*:* |
| symantec | client_security | 3.0.2.2002 | cpe:2.3:a:symantec:client_security:3.0.2.2002:*:*:*:*:*:*:* |
| symantec | client_security | 3.0.2.2010 | cpe:2.3:a:symantec:client_security:3.0.2.2010:*:*:*:*:*:*:* |
| symantec | client_security | 3.0.2.2011 | cpe:2.3:a:symantec:client_security:3.0.2.2011:*:*:*:*:*:*:* |
| symantec | client_security | 3.0.2.2020 | cpe:2.3:a:symantec:client_security:3.0.2.2020:*:*:*:*:*:*:* |
| symantec | client_security | 3.0.2.2021 | cpe:2.3:a:symantec:client_security:3.0.2.2021:*:*:*:*:*:*:* |
| symantec | client_security | 3.1 | cpe:2.3:a:symantec:client_security:3.1:*:*:*:*:*:*:* |
| symantec | client_security | 3.1.0.396 | cpe:2.3:a:symantec:client_security:3.1.0.396:*:*:*:*:*:*:* |
| symantec | client_security | 3.1.0.401 | cpe:2.3:a:symantec:client_security:3.1.0.401:*:*:*:*:*:*:* |
| symantec | client_security | 3.1.394 | cpe:2.3:a:symantec:client_security:3.1.394:*:*:*:*:*:*:* |
| symantec | client_security | 3.1.396 | cpe:2.3:a:symantec:client_security:3.1.396:*:*:*:*:*:*:* |
| symantec | client_security | 3.1.400 | cpe:2.3:a:symantec:client_security:3.1.400:*:*:*:*:*:*:* |
| symantec | client_security | 3.1.401 | cpe:2.3:a:symantec:client_security:3.1.401:*:*:*:*:*:*:* |
| symantec | norton_360 | 1.0 | cpe:2.3:a:symantec:norton_360:1.0:*:*:*:*:*:*:* |
| symantec | norton_antispam | 2004 | cpe:2.3:a:symantec:norton_antispam:2004:*:*:*:*:*:*:* |
| symantec | norton_antispam | 2005 | cpe:2.3:a:symantec:norton_antispam:2005:*:*:*:*:*:*:* |
| symantec | norton_antivirus | 2004 | cpe:2.3:a:symantec:norton_antivirus:2004:*:*:*:*:*:*:* |
| symantec | norton_antivirus | 2005 | cpe:2.3:a:symantec:norton_antivirus:2005:*:*:*:*:*:*:* |
| symantec | norton_antivirus | 2006 | cpe:2.3:a:symantec:norton_antivirus:2006:*:*:*:*:*:*:* |
| symantec | norton_antivirus | 2007 | cpe:2.3:a:symantec:norton_antivirus:2007:*:*:*:*:*:*:* |
| symantec | norton_antivirus | 2008 | cpe:2.3:a:symantec:norton_antivirus:2008:*:*:*:*:*:*:* |
| symantec | norton_internet_security | 2004 | cpe:2.3:a:symantec:norton_internet_security:2004:*:*:*:*:*:*:* |
| symantec | norton_internet_security | 2005 | cpe:2.3:a:symantec:norton_internet_security:2005:*:*:*:*:*:*:* |
| symantec | norton_internet_security | 2006 | cpe:2.3:a:symantec:norton_internet_security:2006:*:*:*:*:*:*:* |
| symantec | norton_internet_security | 2007 | cpe:2.3:a:symantec:norton_internet_security:2007:*:*:*:*:*:*:* |
| symantec | norton_internet_security | 2008 | cpe:2.3:a:symantec:norton_internet_security:2008:*:*:*:*:*:*:* |
| symantec | norton_personal_firewall | 2004 | cpe:2.3:a:symantec:norton_personal_firewall:2004:*:*:*:*:*:*:* |
| symantec | norton_personal_firewall | 2005 | cpe:2.3:a:symantec:norton_personal_firewall:2005:*:*:*:*:*:*:* |
| symantec | norton_personal_firewall | 2006 | cpe:2.3:a:symantec:norton_personal_firewall:2006:*:*:*:*:*:*:* |
| symantec | norton_personal_firewall | 2006_9.1.0.33 | cpe:2.3:a:symantec:norton_personal_firewall:2006_9.1.0.33:*:*:*:*:*:*:* |
| symantec | norton_personal_firewall | 2006_9.1.1.7 | cpe:2.3:a:symantec:norton_personal_firewall:2006_9.1.1.7:*:*:*:*:*:*:* |
| symantec | norton_system_works | 2004 | cpe:2.3:a:symantec:norton_system_works:2004:*:*:*:*:*:*:* |
| symantec | norton_system_works | 2005 | cpe:2.3:a:symantec:norton_system_works:2005:*:*:*:*:*:*:* |
| symantec | norton_system_works | 2006 | cpe:2.3:a:symantec:norton_system_works:2006:*:*:*:*:*:*:* |