CVE-2008-0324

VendorciscoProductvpn clientDiscoveredJan 17, 2008UpdatedApr 23, 2026

Cisco Systems VPN Client IPSec Driver (CVPNDRVA.sys) 5.0.02.0090 allows local users to cause a denial of service (crash) by calling the 0x80002038 IOCTL with a small size value, which triggers memory corruption.

View graph Watch Export

CVSS v3.1

—

EPSS

1.17%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

Connections

2 relationships

CWE-399

source

Timeline

disclosure → media coverage

Jan 17, 2008

Disclosure — published as a CVE record. · last revised by NVD Apr 23, 2026