CVE-2004-0767

The CVE-2004-0767 entry concerns NGSEC StackDefender 1.10. The vulnerability arises when an invalid address is supplied for the ObjectAttributes parameter to the hooks for ZwCreateFile and ZwOpenFile, potentially allowing a denial of service via a system crash. The available documentation provide...

CVE-2004-0767: Undefined Security Weakness

NGSEC StackDefender 1.10 allows attackers to cause a denial of service system crash via an invalid address for the ObjectAttribues parameter to the hooks for the 1 ZwCreateFile or 2 ZwOpenFile functions...