KLA10064 DoS vulnerability in SlySoft

An improper buffer validation vulnerability was found in SlySoft products. By exploiting this vulnerability malicious users can cause a denial of service. This vulnerability can be exploited locally at a point related to ElbyCDIO.sys via a specially designed IOCTL call.

Original advisories

CloneCD Changelog

AnyDVD Changelog

CloneDVD Changelog

Exploitation

Public exploits exist for this vulnerability.

Related products

SlySoft-CloneCD

SlySoft-Virtual-CloneDrive

AnyDVD

elby-CloneDVD

CVE list

CVE-2009-0824 warning

Solution

Update to latest version

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

• PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

Affected Products

• SlySoft AnyDVD versions 6.5.2.2 and earlierSlySoft Virtual CloneDrive versions 5.4.2.3 and earlierSlySoft CloneDVD versions 2.9.2.0 and earlierSlySoft CloneCD versions 5.3.1.3 and earlier