CVEvulnerability

CVE-2009-2450

7.2 HIGH Published 2009-07-13 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-07-13
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

The OAmon.sys kernel driver 3.1.0.0 and earlier in Tall Emu Online Armor Personal Firewall AV+ before 3.5.0.12, and Personal Firewall 3.5 before 3.5.0.14, allows local users to gain privileges via crafted METHOD_NEITHER IOCTL requests to \Device\OAmon containing arbitrary kernel addresses, as demonstrated using the 0x830020C3 IOCTL.

Affected configurations

• tallemu online armor personal firewall av\+ (<= 3.5.0.11) • tallemu online armor personal firewall av\+ 3.5.0.6 • tallemu online armor personal firewall av\+ 3.5.0.9 • tallemu personal firewall (<= 3.5.0.13) • tallemu personal firewall 3.5.0.1 • tallemu personal firewall 3.5.0.2 • tallemu personal firewall 3.5.0.3 • tallemu personal firewall 3.5.0.4 • tallemu personal firewall 3.5.0.5 • tallemu personal firewall 3.5.0.6 • tallemu personal firewall 3.5.0.7 • tallemu personal firewall 3.5.0.8 • tallemu personal firewall 3.5.0.9 • tallemu personal firewall 3.5.0.10 • tallemu personal firewall 3.5.0.11 • tallemu personal firewall 3.5.0.12

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References