# CVE-2003-1309

## Summary

- **CVE ID:** CVE-2003-1309
- **Severity:** UNKNOWN
- **CVSS Score:** 0.04
- **CWE:** N/A
- **Published:** Nov 30, 2006
- **Last Modified:** Mar 16, 2026

## Description

The DeviceIoControl function in the TrueVector Device Driver (VSDATANT) in ZoneAlarm before 3.7.211, Pro before 4.0.146.029, and Plus before 4.0.146.029 allows local users to gain privileges via certain signals (aka "Device Driver Attack").

## Affected Products

- n/a — n/a (n/a)

## References

- [CNA](http://www.osvdb.org/4362)
- [CNA](http://www.securityfocus.com/bid/8342)
- [CNA](https://exchange.xforce.ibmcloud.com/vulnerabilities/12824)
- [CNA](http://download.zonelabs.com/bin/free/information/znalm/zaReleaseHistory.html)
- [CNA](http://sec-labs.hack.pl/papers/win32ddc.php)
- [CNA](http://sec-labs.hack.pl/advisories/seclabs-adv-zone-alarm-04-08-2003.txt)
- [CNA](http://www.osvdb.org/2375)
- [CNA](http://secunia.com/advisories/9459)
- [CNA](http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0070.html)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 1.10%
- **EPSS Percentile:** 77.7

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-17._