CVE-2008-0324

Cisco Systems VPN Client IPSec Driver (CVPNDRVA.sys) 5.0.02.0090 allows local users to cause a denial of service (crash) by calling the 0x80002038 IOCTL with a small size value, which triggers memory corruption.

CVSS v2.0

4.9 MEDIUMAV:L/AC:L/Au:N/C:N/I:N/A:C

EPSS

1.17% chance of exploitation in the next 30 days, 65th percentile

Published

2008-01-17

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/4911

References

• CVE Record
• NVD entry

Related

• CVE-2008-0320
• CVE-2008-0325
• CVE-2008-0311
• CVE-2008-0326
• CVE-2008-0310
• CVE-2008-0327