CVE-2009-2918

LOW 2.1CVE-2009-2918 · Published 21/08/2009 · updated 16/06/2026

In short

CVE-2009-2918 is a LOW (CVSS 2.1) vulnerability affecting thegreenbow vpn client (thegreenbow).
Chance of exploitation in the next 30 days (EPSS): 0.85%, higher than 58.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
thegreenbow vpn client thegreenbow	`= 4.61.003`	No fix yet

Description

The tgbvpn.sys driver in TheGreenBow IPSec VPN Client 4.61.003 allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted request to the 0x80000034 IOCTL, probably involving an input or output buffer size of 0.

References

secunia.com/advisories/36332 · Vendor Advisory
securityfocus.com/archive/1/505816/100/0/threaded
vupen.com/english/advisories/2009/2294 · Vendor Advisory
evilfingers.com/advisory/Advisory/TheGreenBow_VPN_Client_tgbvpn.sys_DoS.php · Exploit

More vulnerabilities in thegreenbow vpn client

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free