CVE-2009-0682

2009-08-1917:30:00

CWE-20

[email protected]

web.nvd.nist.gov

cve-2009-0682

vetmonnt.sys

ca internet security suite

denial of service

system crash

nvd

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

6.1 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.9%

JSON

vetmonnt.sys in CA Internet Security Suite r3, vetmonnt.sys before 9.0.0.184 in Internet Security Suite r4, and vetmonnt.sys before 10.0.0.217 in Internet Security Suite r5 do not properly verify IOCTL calls, which allows local users to cause a denial of service (system crash) via a crafted call.

Affected configurations

NVD

Node

cainternet_security_suiter3

cainternet_security_suiteMatch9.0.0.184r432bit

cainternet_security_suiteMatch10.0.0.217r532bit

CPENameOperatorVersion
ca:internet_security_suiteca internet security suiteeq*
ca:internet_security_suiteca internet security suiteeq9.0.0.184
ca:internet_security_suiteca internet security suiteeq10.0.0.217

CPE	Name	Operator	Version
ca:internet_security_suite	ca internet security suite	eq	*
ca:internet_security_suite	ca internet security suite	eq	9.0.0.184
ca:internet_security_suite	ca internet security suite	eq	10.0.0.217