Unscored severity · published Aug 18, 2004
CVE-2004-0767
NGSEC StackDefender 1.10 allows attackers to cause a denial of service (system crash) via an invalid address for the ObjectAttribues parameter to the hooks for the (1)…
–
CVSS
1%
EPSS
No
On KEV
Description
NGSEC StackDefender 1.10 allows attackers to cause a denial of service (system crash) via an invalid address for the ObjectAttribues parameter to the hooks for the (1) ZwCreateFile or (2) ZwOpenFile functions.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ST
Stackdefender · Ngsec
1.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0767
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0767
Vendor Advisory
http://www.idefense.com/application/poi/display?id=118&type=vulnerabilities&flashstatus=false
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/16879
More from Stackdefender
–
CVE-2004-0766
NGSEC StackDefender 2.0 allows attackers to cause a denial of service (system crash) via an invalid address for the BaseAddress parameter to the hooks for the (1)…