Information disclosure

Outpost Firewall Pro 4.0.1025.7828 does not properly validate certain parameters to System Service Descriptor Table SSDT function handlers, which allows local users to cause a denial of service crash and possibly gain privileges via the 1 NtCreateKey, 2 NtDeleteFile, 3 NtLoadDriver, 4...

CVE-2006-7160

Summary: CVE-2006-7160 affects the Sandbox.sys driver in Outpost Firewall PRO 4.0 (and possibly earlier versions). It does not validate arguments to hooked SSDT functions, allowing a local attacker to cause a denial of service (crash) by passing invalid arguments to a set of SSDT handlers, includ...