Unscored severity · published Aug 18, 2004
CVE-2004-0766
NGSEC StackDefender 2.0 allows attackers to cause a denial of service (system crash) via an invalid address for the BaseAddress parameter to the hooks for the (1)…
–
CVSS
1%
EPSS
No
On KEV
Description
NGSEC StackDefender 2.0 allows attackers to cause a denial of service (system crash) via an invalid address for the BaseAddress parameter to the hooks for the (1) ZwAllocateVirtualMemory or (2) ZwProtectVirtualMemory functions.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ST
Stackdefender · Ngsec
2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0766
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0766
Vendor Advisory
http://www.idefense.com/application/poi/display?id=119&type=vulnerabilities&flashstatus=false
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/16892
More from Stackdefender
–
CVE-2004-0767
NGSEC StackDefender 1.10 allows attackers to cause a denial of service (system crash) via an invalid address for the ObjectAttribues parameter to the hooks for the (1)…