CVE-2009-2450

Published: Jul 13, 2009Modified: Apr 23, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

The OAmon.sys kernel driver 3.1.0.0 and earlier in Tall Emu Online Armor Personal Firewall AV+ before 3.5.0.12, and Personal Firewall 3.5 before 3.5.0.14, allows local users to gain privileges via crafted METHOD_NEITHER IOCTL requests to \Device\OAmon containing arbitrary kernel addresses, as demonstrated using the 0x830020C3 IOCTL.

Affected (16)

Products: Tallemu: Online Armor Personal Firewall Av+, Personal Firewall

Tallemu

2 products

Online Armor Personal Firewall Av+

Personal Firewall

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Tallemu Online Armor Personal Firewall Av+	Up to 3.5.0.11
Tallemu Online Armor Personal Firewall Av+	Version 3.5.0.6
Tallemu Online Armor Personal Firewall Av+	Version 3.5.0.9
Tallemu Personal Firewall	Up to 3.5.0.13
Tallemu Personal Firewall	Version 3.5.0.10
Tallemu Personal Firewall	Version 3.5.0.11
Tallemu Personal Firewall	Version 3.5.0.12
Tallemu Personal Firewall	Version 3.5.0.1
Tallemu Personal Firewall	Version 3.5.0.2
Tallemu Personal Firewall	Version 3.5.0.3
Tallemu Personal Firewall	Version 3.5.0.4
Tallemu Personal Firewall	Version 3.5.0.5
Tallemu Personal Firewall	Version 3.5.0.6
Tallemu Personal Firewall	Version 3.5.0.7
Tallemu Personal Firewall	Version 3.5.0.8
Tallemu Personal Firewall	Version 3.5.0.9