CVE-2009-2918: Thegreenbow VPN Client

Low severity, CVSS 2.1. EPSS: 0.9% chance of exploitation in the next 30 days.

The tgbvpn.sys driver in TheGreenBow IPSec VPN Client 4.61.003 allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted request to the 0x80000034 IOCTL, probably involving an input or output buffer size of 0.

Affected products

• Thegreenbow Thegreenbow VPN Client: version 4.61.003 only

Published 2009-08-21. Last modified 2026-06-16.