Unscored severity · published Mar 2, 2007
CVE-2007-1194
Norman SandBox Analyzer does not use the proper range for Interrupt Descriptor Table (IDT) entries, which allows local users to determine that the local machine is an emulator, or…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Norman SandBox Analyzer does not use the proper range for Interrupt Descriptor Table (IDT) entries, which allows local users to determine that the local machine is an emulator, or a similar environment not based on a physical Intel processor, which allows attackers to produce malware that is more difficult to analyze.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NS
Norman Sandbox Analyzer · Norman
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1194
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1194
osvdb.org
http://osvdb.org/34955
www.ntsecurity.nu
http://www.ntsecurity.nu/onmymind/2007/2007-02-27.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/461555/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/461804/100/100/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/461805/100/100/threaded