Description (CNA)
The OAmon.sys kernel driver 3.1.0.0 and earlier in Tall Emu Online Armor Personal Firewall AV+ before 3.5.0.12, and Personal Firewall 3.5 before 3.5.0.14, allows local users to gain privileges via crafted METHOD_NEITHER IOCTL requests to \Device\OAmon containing arbitrary kernel addresses, as demonstrated using the 0x830020C3 IOCTL.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50960
- http://www.securityfocus.com/bid/35227
- http://www.exploit-db.com/exploits/8875
- http://milw0rm.com/sploits/2009-OAmon_Exp.zip
- http://www.ntinternals.org/ntiadv0806/ntiadv0806.html
ADP enrichment
No English description supplied.