CVE-2009-0824

Elaborate Bytes ElbyCDIO.sys 6.0.2.0 and earlier, as distributed in SlySoft AnyDVD before 6.5.2.6, Virtual CloneDrive 5.4.2.3 and earlier, CloneDVD 2.9.2.0 and earlier, and CloneCD 5.3.1.3 and earlier, uses the METHOD_NEITHER communication method for IOCTLs and does not properly validate a buffer associated with the Irp object, which allows local users to cause a denial of service (system crash) via a crafted IOCTL call.

CVSS v2.0

4.9 MEDIUMAV:L/AC:L/Au:N/C:N/I:N/A:C

EPSS

0.73% chance of exploitation in the next 30 days, 52th percentile

Published

2009-03-14

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/32850

References

• CVE Record
• NVD entry

Related

• CVE-2009-0821
• CVE-2009-0825
• CVE-2009-0820
• CVE-2009-0826
• CVE-2009-0819
• CVE-2009-0827