NuytsTech Security

CVE-2024-0581

by ·

An Uncontrolled Resource Consumption vulnerability has been found on Sandsprite Scdbg.exe, affecting version 1.0. This vulnerability allows an attacker to send a specially crafted shellcode payload to the ‘/foff’ parameter and cause an application shutdown. A malware program could use this shellcode sequence to shut down the application and evade the scan.

More information : https://www.incibe.es/en/incibe-cert/notices/aviso/uncontrolled-resource-consumption-vulnerability-sandsprite-scdbg

Attack vector : LOCAL
Attack complexity : LOW
Privileges required : LOW
User interaction : NONE
Confidentiality impact : NONE
Integrity impact : NONE
Base score : 5.5
Base severity : MEDIUM
Exploitability score : 1.8
Impact score : 3.6

Tags: