PT-2004-3538 · Freezex · Freezex

Published 2004-12-31 · Updated 2017-07-20 · CVE-2004-2648

Positive Technologies (AI Summary)

CVSS v2.0

1.0

Low

Base vector

AV:L/AC:H/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions FreezeX version 1.00.100.0666

Description The issue allows local users with administrator privileges to cause a denial of service in the FreezeX application. This can be achieved by overwriting the db.fzx file.

Recommendations For FreezeX version 1.00.100.0666, consider restricting access to the db.fzx file to prevent unauthorized overwrites until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2004-2648

Affected Products

Freezex

References · 5

• 🔥 http://securitytracker.com/id?1012699 · Exploit
• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0458.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-2648 · Security Note
• http://osvdb.org/12659 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18643 · Note