KLA10022 DoS vulnerability in DAEMON Tools

2011-11-0300:00:00

Kaspersky Lab

threats.kaspersky.com

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

An unspecified vulnerability was found in the DAEMON Tools. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited from the network at a point related to DeviceIoControl via an invalid request.

Original advisories

NVD

Related products

DAEMON-Tools-Pro-Standard-Advanced

DAEMON-Tools-Lite

DAEMON-Tools-Pro

CVE list

CVE-2011-3987 warning

Solution

Update to latest version

DAEMON Tools

Impacts

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

DAEMON Tools Lite versions 4.40.2 and earlierDAEMON Tools Pro Standard versions 4.41.214 and earlierDAEMON Tools Pro Advancesd versions 4.41.214 and earlier