Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
ProcessGuard 3.410 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via kernel SSDT hooks for Windows Native API functions including (1) NtCreateFile, (2) NtCreateKey, (3) NtDeleteValueKey, (4) NtOpenFile, (5) NtOpenKey, and (6) NtSetValueKey.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
DiamondCS DiamondCS ProcessGuard 输入验证漏洞
Vulnerability Description
ProcessGuard 3.410不能合理确认System Service Descriptor Table (SSDT)函数操作者的特定参数, 使本地用户可以借助包含(1) NtCreateFile, (2) NtCreateKey, (3) NtDeleteValueKey, (4) NtOpenFile, (5) NtOpenKey,以及(6) NtSetValueKey的Windows Native API函数的核心SSDT连接造成拒绝服务(崩溃)并可能获得特权。
CVSS Information
N/A
Vulnerability Type
N/A