NetSight
IP …
high7.2Public exploit code

CVE-2009-2450

The OAmon.sys kernel driver 3.1.0.0 and earlier in Tall Emu Online Armor Personal Firewall AV+ before 3.5.0.12, and Personal Firewall 3.5 before 3.5.0.14, allo…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The OAmon.sys kernel driver 3.1.0.0 and earlier in Tall Emu Online Armor Personal Firewall AV+ before 3.5.0.12, and Personal Firewall 3.5 before 3.5.0.14, allows local users to gain privileges via crafted METHOD_NEITHER IOCTL requests to \Device\OAmon containing arbitrary kernel addresses, as demonstrated using the 0x830020C3 IOCTL.

Affected products

VendorProductAffected versions
TallemuOnline Armor Personal Firewall Av\+
through 3.5.0.11
Versions 3.5.0.6, 3.5.0.9
TallemuPersonal Firewall
through 3.5.0.13
Versions 3.5.0.1, 3.5.0.2, 3.5.0.3, 3.5.0.4, 3.5.0.5

Weakness classification

CWE-119

References