Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2008-5724
HistoryDec 26, 2008 - 5:30 p.m.

CVE-2008-5724

2008-12-2617:30:00
CWE-264
mitre
web.nvd.nist.gov
28
eset smart security
epfw.sys
privilege escalation
cve-2008-5724
nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.5

Confidence

High

EPSS

0

Percentile

0.4%

JSON

The Personal Firewall driver (aka epfw.sys) 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows local users to gain privileges via a crafted IRP in a certain METHOD_NEITHER IOCTL request to \Device\Epfw that overwrites portions of memory.

Affected configurations

Nvd
Node
esetsmart_securityRange≤3.0.672
OR
esetsmart_securityMatch3.0.551
OR
esetsmart_securityMatch3.0.560
OR
esetsmart_securityMatch3.0.563
OR
esetsmart_securityMatch3.0.621
OR
esetsmart_securityMatch3.0.642
OR
esetsmart_securityMatch3.0.650
OR
esetsmart_securityMatch3.0.657
OR
esetsmart_securityMatch3.0.667
OR
esetsmart_securityMatch3.0.669
VendorProductVersionCPE
esetsmart_security*cpe:2.3:a:eset:smart_security:*:*:*:*:*:*:*:*
esetsmart_security3.0.551cpe:2.3:a:eset:smart_security:3.0.551:*:*:*:*:*:*:*
esetsmart_security3.0.560cpe:2.3:a:eset:smart_security:3.0.560:*:*:*:*:*:*:*
esetsmart_security3.0.563cpe:2.3:a:eset:smart_security:3.0.563:*:*:*:*:*:*:*
esetsmart_security3.0.621cpe:2.3:a:eset:smart_security:3.0.621:*:*:*:*:*:*:*
esetsmart_security3.0.642cpe:2.3:a:eset:smart_security:3.0.642:*:*:*:*:*:*:*
esetsmart_security3.0.650cpe:2.3:a:eset:smart_security:3.0.650:*:*:*:*:*:*:*
esetsmart_security3.0.657cpe:2.3:a:eset:smart_security:3.0.657:*:*:*:*:*:*:*
esetsmart_security3.0.667cpe:2.3:a:eset:smart_security:3.0.667:*:*:*:*:*:*:*
esetsmart_security3.0.669cpe:2.3:a:eset:smart_security:3.0.669:*:*:*:*:*:*:*

Related

nessus 1
prion 1
exploitdb 1
cvelist 1
nvd 1
nessus
nessus
NOD32 3.0/ESET Smart Security < 3.0.684 Local Privilege Escalation
2009-01-02 00:00:00
prion
prion
Cross site request forgery (csrf)
2008-12-26 17:30:00
exploitdb
exploitdb
ESET Smart Security 3.0.672 - &#039;epfw.sys&#039; Local Privilege Escalation
2008-12-18 00:00:00
cvelist
cvelist
CVE-2008-5724
2008-12-26 17:08:00
nvd
nvd
CVE-2008-5724
2008-12-26 17:30:00

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.5

Confidence

High

EPSS

0

Percentile

0.4%

JSON
Related for CVE-2008-5724
nessus1prion1exploitdb1cvelist1nvd1