CVE-2006-7160

The Sandbox.sys driver in Outpost Firewall PRO 4.0, and possibly earlier versions, does not validate arguments to hooked SSDT functions, which allows local users to cause a denial of service (crash) via invalid arguments to the (1) NtAssignProcessToJobObject,, (2) NtCreateKey, (3) NtCreateThread, (4) NtDeleteFile, (5) NtLoadDriver, (6) NtOpenProcess, (7) NtProtectVirtualMemory, (8) NtReplaceKey, (9) NtTerminateProcess, (10) NtTerminateThread, (11) NtUnloadDriver, and (12) NtWriteVirtualMemory functions.

• CWE-20

• http://secunia.com/advisories/22913Vendor Advisory
• http://securityreason.com/securityalert/2376
• http://www.matousec.com/info/advisories/Outpost-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.phpVendor Advisory
• http://www.securityfocus.com/archive/1/451672/100/0/threaded
• http://www.securityfocus.com/bid/21097
• http://www.vupen.com/english/advisories/2006/4537Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30312
• http://secunia.com/advisories/22913Vendor Advisory
• http://securityreason.com/securityalert/2376
• http://www.matousec.com/info/advisories/Outpost-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.phpVendor Advisory
• http://www.securityfocus.com/archive/1/451672/100/0/threaded
• http://www.securityfocus.com/bid/21097
• http://www.vupen.com/english/advisories/2006/4537Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30312

Published

Mar 7, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-7154Iono allows remote attackers to obtain the full server path …
• CVE-2006-7155Novell BorderManager 3.8 SP4 generates the same ISAKMP cooki…
• CVE-2006-7156PHP remote file inclusion vulnerability in addon_keywords.ph…
• CVE-2006-7157Buffer overflow in Google Earth v4.0.2091 (beta) allows remo…
• CVE-2006-7158Cross-site scripting (XSS) vulnerability in Oracle Applicati…
• CVE-2006-7159Directory traversal vulnerability in include/prune_torrents.…
• CVE-2006-7161SQL injection vulnerability in giris_yap.asp in Hazir Site 2…
• CVE-2006-7162PuTTY 0.59 and earlier uses weak file permissions for (1) pp…
• CVE-2006-7163DreameeSoft Password Master 1.0 stores the database in an un…
• CVE-2006-7164SimpleFileServlet in IBM WebSphere Application Server 5.0.1 …
• CVE-2006-7165IBM WebSphere Application Server (WAS) 5.0 through 5.1.1.0 a…
• CVE-2006-7166IBM WebSphere Application Server (WAS) 5.1.1.9 and earlier a…