medium4.9Public exploit code

CVE-2009-0824

Elaborate Bytes ElbyCDIO.sys 6.0.2.0 and earlier, as distributed in SlySoft AnyDVD before 6.5.2.6, Virtual CloneDrive 5.4.2.3 and earlier, CloneDVD 2.9.2.0 and…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

SlySoft (Multiple Products) - Driver IOCTL Request Multiple Local Buffer Overflow Vulnerabilities2009-03-12 · local · windows · Verified

Impact

Elaborate Bytes ElbyCDIO.sys 6.0.2.0 and earlier, as distributed in SlySoft AnyDVD before 6.5.2.6, Virtual CloneDrive 5.4.2.3 and earlier, CloneDVD 2.9.2.0 and earlier, and CloneCD 5.3.1.3 and earlier, uses the METHOD_NEITHER communication method for IOCTLs and does not properly validate a buffer associated with the Irp object, which allows local users to cause a denial of service (system crash) via a crafted IOCTL call.

Affected products

Vendor	Product	Affected versions
Slysoft	Anydvd	through 6.5.2.2
Slysoft	Clonecd	through 5.3.1.3
Slysoft	Clonedvd	through 2.9.2.0
Slysoft	Virtualclonedrive	through 5.4.2.3

Weakness classification

CWE-119

Public exploit code

Impact

Affected products

Weakness classification

References