Lucene search

K
cvelistINCIBECVELIST:CVE-2024-0581
HistoryJan 16, 2024 - 1:14 p.m.

CVE-2024-0581 Uncontrolled Resource Consumption vulnerability on Sandsprite scdbg

2024-01-1613:14:27
CWE-400
INCIBE
www.cve.org
1
cve-2024-0581
sandsprite
uncontrolled resource consumption
shellcode
application shutdown
malware program

CVSS3

4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

5.7

Confidence

High

EPSS

0

Percentile

9.0%

An Uncontrolled Resource Consumption vulnerability has been found on Sandsprite Scdbg.exe, affecting version 1.0. This vulnerability allows an attacker to send a specially crafted shellcode payload to the ‘/foff’ parameter and cause an application shutdown. A malware program could use this shellcode sequence to shut down the application and evade the scan.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Scdbg",
    "vendor": "Sandsprite",
    "versions": [
      {
        "status": "affected",
        "version": "1.0"
      }
    ]
  }
]

CVSS3

4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

5.7

Confidence

High

EPSS

0

Percentile

9.0%

Related for CVELIST:CVE-2024-0581