CVE-2009-0682
Published Aug 19, 2009
Last updated 6 years ago
Overview
- Description
- vetmonnt.sys in CA Internet Security Suite r3, vetmonnt.sys before 9.0.0.184 in Internet Security Suite r4, and vetmonnt.sys before 10.0.0.217 in Internet Security Suite r5 do not properly verify IOCTL calls, which allows local users to cause a denial of service (system crash) via a crafted call.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 2.1
- Impact score
- 2.9
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
- nvd@nist.gov
- CWE-20
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ca:internet_security_suite:*:r3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C9C3A838-C3FC-4134-89E3-3AE13078A359"
},
{
"criteria": "cpe:2.3:a:ca:internet_security_suite:9.0.0.184:r4:32bit:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "80B3EC69-F6F6-45E1-80BB-038C1D9C5FA6"
},
{
"criteria": "cpe:2.3:a:ca:internet_security_suite:10.0.0.217:r5:32bit:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E391D3E0-FEBF-4634-BB89-7AFCC04415E9"
}
],
"operator": "OR"
}
]
}
]