Lucene search

K
cveMitreCVE-2008-4451
HistoryOct 06, 2008 - 11:25 p.m.

CVE-2008-4451

2008-10-0623:25:50
CWE-264
CWE-94
mitre
web.nvd.nist.gov
26
cve-2008-4451
sysinspector
antistealth
driver
esiasdrv.sys
eset
system analyzer tool
ioctl
security vulnerability

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

High

EPSS

0

Percentile

15.6%

The SysInspector AntiStealth driver (esiasdrv.sys) 3.0.65535.0 in ESET System Analyzer Tool 1.1.1.0 allows local users to execute arbitrary code via a certain METHOD_NEITHER IOCTL request to \Device\esiasdrv that overwrites a pointer.

Affected configurations

Nvd
Node
eset_softwaresystem_analyzer_toolMatch1.1.1.0
VendorProductVersionCPE
eset_softwaresystem_analyzer_tool1.1.1.0cpe:2.3:a:eset_software:system_analyzer_tool:1.1.1.0:*:*:*:*:*:*:*

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

High

EPSS

0

Percentile

15.6%

Related for CVE-2008-4451