PT-2004-3369 · Diamondcs+1 · Diamondcs Process Guard Free+1

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-2477

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: DiamondCS Process Guard Free version 2.000

Description: The issue allows local users to disable the process guard protection system. This is achieved by overwriting the current Service Descriptor Table (SDT) in devicephysicalmemory with the original SDT found in ntoskrnl.exe.

Recommendations: For DiamondCS Process Guard Free version 2.000, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2004-2477

Affected Products

Diamondcs Process Guard Free

Ntoskrnl.Exe

References · 7

• 🔥 http://security.org.sg/vuln/procguard.html · Exploit
• 🔥 http://securitytracker.com/alerts/2004/Jul/1010662.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-2477 · Security Note
• http://osvdb.org/7606 · Note
• http://secunia.com/advisories/12033 · Note
• http://securityfocus.com/bid/10675 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16654 · Note