CVE-2009-0682

CA Internet Security Suite r3-r5 - Denial of Service via IOCTL Call Verification

Title source: llm
STIX 2.1

Description

vetmonnt.sys in CA Internet Security Suite r3, vetmonnt.sys before 9.0.0.184 in Internet Security Suite r4, and vetmonnt.sys before 10.0.0.217 in Internet Security Suite r5 do not properly verify IOCTL calls, which allows local users to cause a denial of service (system crash) via a crafted call.

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/506103/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/57228
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/505880/100/0/threaded
Various Sources x_refsource_misc
http://en.securitylab.ru/lab/PT-2009-05

Scores

EPSS 0.0035
EPSS Percentile 27.1%

Details

CWE
CWE-20
Status published
Products (3)
ca/internet_security_suite
ca/internet_security_suite 9.0.0.184 r4
ca/internet_security_suite 10.0.0.217 r5
Published Aug 19, 2009
Tracked Since Feb 18, 2026