CVE-2003-1309: Zonelabs Zonealarm

High severity, CVSS 10.0. EPSS: 2.3% chance of exploitation in the next 30 days.

The DeviceIoControl function in the TrueVector Device Driver (VSDATANT) in ZoneAlarm before 3.7.211, Pro before 4.0.146.029, and Plus before 4.0.146.029 allows local users to gain privileges via certain signals (aka "Device Driver Attack").

Affected products

• Zonelabs Zonealarm: version 3.7.202 only; version 3.7.211 only

Published 2003-12-31. Last modified 2026-06-16.