CVE-2003-1309

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.27%

Published

Dec 31, 2003

Modified

Jun 16, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The DeviceIoControl function in the TrueVector Device Driver (VSDATANT) in ZoneAlarm before 3.7.211, Pro before 4.0.146.029, and Plus before 4.0.146.029 allows local users to gain privileges via certain signals (aka "Device Driver Attack").

Affected Products (3)

zonelabs · zonealarmvulnerable

References (18)

http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0070.html

ExploitVendor Advisory

http://download.zonelabs.com/bin/free/information/znalm/zaReleaseHistory.html

http://sec-labs.hack.pl/advisories/seclabs-adv-zone-alarm-04-08-2003.txt

http://sec-labs.hack.pl/papers/win32ddc.php

http://secunia.com/advisories/9459

PatchVendor Advisory

http://www.osvdb.org/2375

PatchVendor Advisory

http://www.osvdb.org/4362

PatchVendor Advisory

http://www.securityfocus.com/bid/8342

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/12824

http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0070.html

ExploitVendor Advisory

http://download.zonelabs.com/bin/free/information/znalm/zaReleaseHistory.html

http://sec-labs.hack.pl/advisories/seclabs-adv-zone-alarm-04-08-2003.txt

http://sec-labs.hack.pl/papers/win32ddc.php

http://secunia.com/advisories/9459

PatchVendor Advisory

http://www.osvdb.org/2375

PatchVendor Advisory

http://www.osvdb.org/4362

PatchVendor Advisory

http://www.securityfocus.com/bid/8342

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/12824

KEV Catalog EPSS Scores Vendors All CVEs