CVE-2011-3987

Severity: medium (CVSS 4.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2011-11-03 · updated 2026-06-16
Weakness: CWE-399

Description

dtsoftbus01.sys in DAEMON Tools Lite before 4.41.3, Pro Standard before 4.41.0315, and Pro Advanced before 4.41.0315 allows local users to cause a denial of service (system crash) via an invalid DeviceIoControl request to \\.\dtsoftbusctl.

Affected products

Daemon-Tools Daemon Tools: through 4.40.2; through 4.41.0314; 4.11.1, 4.11.2, 4.12.0, 4.12.1, 4.12.2, 4.12.3 (+29)

References

http://archives.neohapsis.com/archives/bugtraq/2011-10/0101.html
http://jvn.jp/en/jp/JVN07414354/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2011-000085
http://secunia.com/advisories/46416
http://www.fourteenforty.jp/research/advisory.cgi?FFRRA-20111020
http://www.securityfocus.com/bid/50106
https://exchange.xforce.ibmcloud.com/vulnerabilities/70597
http://archives.neohapsis.com/archives/bugtraq/2011-10/0101.html
http://jvn.jp/en/jp/JVN07414354/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2011-000085
http://secunia.com/advisories/46416
http://www.fourteenforty.jp/research/advisory.cgi?FFRRA-20111020

Get alerted when CVE-2011-3987 or the next vulnerability affects your stack