PT-2009-3421 · Slysoft+1 · Clonedvd+4
Nikita Tarakanov
·
Publicado
2009-03-14
·
Atualizado
2025-04-25
·
CVE-2009-0824
CVSS v2.0
4.9
Média
| Vetor | AV:L/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
ElbyCDIO.sys versions 6.0.2.0 and earlier
AnyDVD versions prior to 6.5.2.6
Virtual CloneDrive versions 5.4.2.3 and earlier
CloneDVD versions 2.9.2.0 and earlier
CloneCD versions 5.3.1.3 and earlier
Description
The issue exists due to an error in input validation in the METHOD NEITHER method in the ElbyCDIO.sys driver, which allows local users to cause a denial of service (system crash) via a crafted IOCTL call. This can lead to memory corruption and system termination. The estimated number of potentially affected devices and details about real-world incidents are not provided.
Recommendations
For ElbyCDIO.sys version 6.0.2.0 and earlier, consider disabling the METHOD NEITHER communication method for IOCTLs until a patch is available.
For AnyDVD versions prior to 6.5.2.6, update to version 6.5.2.6 or later.
For Virtual CloneDrive versions 5.4.2.3 and earlier, update to a version later than 5.4.2.3.
For CloneDVD versions 2.9.2.0 and earlier, update to a version later than 2.9.2.0.
For CloneCD versions 5.3.1.3 and earlier, update to a version later than 5.3.1.3.
Exploit
Correção
DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Anydvd
Clonecd
Clonedvd
Elbycdio.Sys
Virtual Clonedrive