Lucene search
HistoryAug 21, 2005 - 4:00 a.m.
CVE-2004-2477
cve-2004-2477
process guard protection
local users
overwrite
sdt
ntoskrnl.exe
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
6.6 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
25.6%
DiamondCS Process Guard Free 2.000 allows local users to disable the process guard protection system by overwriting the current Service Descriptor Table (SDT) in \device\physicalmemory with the original SDT found in ntoskrnl.exe.
Affected configurations
Node
diamondcsprocess_guard_freeMatch2.000
| CPE | Name | Operator | Version |
|---|---|---|---|
| diamondcs:process_guard_free | diamondcs process guard free | eq | 2.000 |
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
6.6 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
25.6%
Related for CVE-2004-2477