Buffer overflow in Tallemu Online Armor Personal Firewall Av\+
CVE-2009-2450
The OAmon.sys kernel driver 3.1.0.0 and earlier in Tall Emu Online Armor Personal Firewall AV+ before 3.5.0.12, and Personal Firewall 3.5 before 3.5.0.14, allows local users to gain privileges via crafted METHOD_NEITHER IOCTL requests to \Device\OAmon containing arbitrary kernel addresses, as demonstrated using the 0x830020C3 IOCTL.
Vulnerability class: Buffer Overflow
EPSS: 0.008 (51.8th percentile) — read the EPSS interpretation.
Affected products
- Tallemu Online_armor_personal_firewall_av\+ — versions 3.5.0.6, 3.5.0.9
- Tallemu Personal_firewall — versions 3.5.0.1, 3.5.0.2, 3.5.0.3
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
- cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (x_refsource_MISC)