← back
CVE-2009-2450

CVE-2009-2450

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 0.8%
from disclosure to weapon0 days
Published on NVDJul 13
1st PoCJun 4
exploitation probability
0.8%top 48% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
The OAmon.sys kernel driver 3.1.0.0 and earlier in Tall Emu Online Armor Personal Firewall AV+ before 3.5.0.12, and Personal Firewall 3.5 before 3.5.0.14, allows local users to gain privileges via crafted METHOD_NEITHER IOCTL requests to \Device\OAmon containing arbitrary kernel addresses, as demonstrated using the 0x830020C3 IOCTL.
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.