CVE-2009-0824

CVE-2009-0824 describes a denial-of-service vulnerability in the ElbyCDIO.sys driver, affecting multiple SlySoft products including AnyDVD, Virtual CloneDrive, CloneDVD, and CloneCD. This flaw stems from improper buffer validation when handling IOCTLs, allowing a local attacker to crash the system. With a CVSS score of 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C), it is considered a medium severity vulnerability requiring local access and low attack complexity to achieve a denial of service. While not listed on CISA's KEV catalog, an ExploitDB entry confirms the existence of exploit code. Community discussion and media coverage indicate some awareness of this vulnerability, though it is not currently considered actively exploited.