CVE-2009-0682

2009-08-1917:30:00

CWE-20

[email protected]

web.nvd.nist.gov

cve-2009-0682

vetmonnt.sys

ca internet security suite

denial of service

system crash

nvd

6.2 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.0005 Low

EPSS

Percentile

17.0%

JSON

vetmonnt.sys in CA Internet Security Suite r3, vetmonnt.sys before 9.0.0.184 in Internet Security Suite r4, and vetmonnt.sys before 10.0.0.217 in Internet Security Suite r5 do not properly verify IOCTL calls, which allows local users to cause a denial of service (system crash) via a crafted call.

CPENameOperatorVersion
ca:internet_security_suiteca internet security suiteeq10.0.0.217
ca:internet_security_suiteca internet security suiteeq9.0.0.184
ca:internet_security_suiteca internet security suiteeq*

CPE	Name	Operator	Version
ca:internet_security_suite	ca internet security suite	eq	10.0.0.217
ca:internet_security_suite	ca internet security suite	eq	9.0.0.184
ca:internet_security_suite	ca internet security suite	eq	*