CVE-2007-1194: Norman Sandbox Analyzer

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Norman SandBox Analyzer does not use the proper range for Interrupt Descriptor Table (IDT) entries, which allows local users to determine that the local machine is an emulator, or a similar environment not based on a physical Intel processor, which allows attackers to produce malware that is more difficult to analyze.

Affected products

• Norman Norman Sandbox Analyzer: any version

Published 2007-03-02. Last modified 2026-06-16.