This page aggregates publicly disclosed CVE and security risk information related to pedestal_software, with CVSS, EPSS, publication dates, and vulnerability intelligence data to help assess potential risk and remediation priority.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2004-1718 | The ZwOpenSection function in Integrity Protection Driver (IPD) 1.4 and earlier allows local users to cause a denial of service (crash) via an invalid pointer in the "oa" argument. | [email protected] | 2.1 | 0.43% | 2004-08-17 | 2026-04-16 |
| CVE-2003-1246 | NtCreateSymbolicLinkObject in ntdll.dll in Integrity Protection Driver (IPD) 1.2 and 1.3 allows local users to create and overwrite arbitrary files via a symlink attack on \winnt\system32\drivers using the subst command. | [email protected] | 2.1 | 0.33% | 2003-12-31 | 2026-04-16 |
| CVE-2002-2127 | Integrity Protection Driver (IPD) 1.2 and earlier blocks access to \Device\PhysicalMemory by its name, which could allow local privileged processes to overwrite kernel memory by accessing the device through a symlink. | [email protected] | 2.1 | 0.35% | 2002-12-31 | 2026-04-16 |
| CVE-2002-2126 | restrictEnabled in Integrity Protection Driver (IPD) 1.2 delays driver installation for 20 minutes, which allows local users to insert malicious code by setting system clock to an earlier time. | [email protected] | 2.1 | 0.43% | 2002-12-31 | 2026-04-16 |