Vulnerability · Published Jan 16, 2024 · Assigned by INCIBE
CVE-2024-0581Uncontrolled Resource Consumption vulnerability on Sandsprite scdbg
Medium 4.0
In plain English
A medium-severity uncontrolled resource consumption in Scdbg from Sandsprite. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities).
Official description
An Uncontrolled Resource Consumption vulnerability has been found on Sandsprite Scdbg.exe, affecting version 1.0. This vulnerability allows an attacker to send a specially crafted shellcode payload to the '/foff' parameter and cause an application shutdown. A malware program could use this shellcode sequence to shut down the application and evade the scan.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Sandsprite | Scdbg | 1.0 |
Weakness: CWE-400 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L