Vulnerability in Ngsec Stackdefender
CVE-2004-0767
NGSEC StackDefender 1.10 allows attackers to cause a denial of service (system crash) via an invalid address for the ObjectAttribues parameter to the hooks for the (1) ZwCreateFile or (2) ZwOpenFile functions.
EPSS: 0.010 (60.1th percentile) — read the EPSS interpretation.
Affected products
- Ngsec Stackdefender — versions 1.10
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_MISC, Vendor Advisory)