Secunia

Tan Chew Keong has reported a vulnerability in DiamondCS Process Guard, which can be exploited certain malicious processes to disable the security features provided by the product.

The problem is that the security features provided by the product can reportedly be disabled by restoring the running kernel's SDT (Service Descriptor Table) ServiceTable by writing directly to the "\Device\PhysicalMemory" section object.

Successful exploitation disables the protection measures thereby allowing a privileged process to terminate protected processes.

The vulnerability has been reported in version 2.000. Other versions may also be affected.

Solution
The vulnerability will reportedly be fixed in the next release.
Further details available in Customer Area

Provided and/or discovered by
Tan Chew Keong

Changelog
Further details available in Customer Area

Original Advisory
http://www.security.org.sg/vuln/procguard.html

Deep Links
Links available in Customer Area