Vulnerability Database

289,782

Total vulnerabilities in the database

CVE-2004-0767

NGSEC StackDefender 1.10 allows attackers to cause a denial of service (system crash) via an invalid address for the ObjectAttribues parameter to the hooks for the (1) ZwCreateFile or (2) ZwOpenFile functions.

  • Published: Aug 18, 2004
  • Updated: Apr 13, 2023
  • CVE: CVE-2004-0767
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:N/I:N/A:P

No CWE or OWASP classifications available.

Software From Fixed in
ngsec / stackdefender 1.10 1.10.x