CVE-2004-2477 Security feature bypass in n/a
Local attackers can bypass DiamondCS Process Guard protection by overwriting the Service Descriptor Table in physical memory.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2004-2477?
CVE-2004-2477 is a low-severity vulnerability in n/a, published on 21 Aug 2005. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
DiamondCS Process Guard Free 2.000 allows local users to disable the process guard protection system by overwriting the current Service Descriptor Table (SDT) in \device\physicalmemory with the original SDT found in ntoskrnl.exe.
Which versions are affected by CVE-2004-2477?
It affects 1 product.
Products include Diamondcs Process Guard Free.
How do I fix CVE-2004-2477?
No fix has been published for CVE-2004-2477 yet. Limit exposure of the affected software until one is available.
Is CVE-2004-2477 being exploited?
There is no known exploitation of CVE-2004-2477 in the wild and no public exploit code.
Sources
Also known as GHSA-98j3-g9mx-9rxh.