Lucene search

K
cveMitreCVE-2008-5048
HistoryNov 13, 2008 - 2:30 a.m.

CVE-2008-5048

2008-11-1302:30:00
CWE-119
mitre
web.nvd.nist.gov
27
cve-2008-5048
buffer overflow
atepmon.sys
isecsoft
anti-trojan elite 4.2.1
denial of service
arbitrary code execution
local users
nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

High

EPSS

0

Percentile

0.4%

Buffer overflow in Atepmon.sys in ISecSoft Anti-Trojan Elite 4.2.1 and earlier, and possibly 4.2.2, allows local users to cause a denial of service (crash) and possibly execute arbitrary code via long inputs to the 0x00222494 IOCTL.

Affected configurations

Nvd
Node
isecsoftanti-trojan_eliteRange4.2.2
OR
isecsoftanti-trojan_eliteMatch4.1.9
OR
isecsoftanti-trojan_eliteMatch4.2.0
OR
isecsoftanti-trojan_eliteMatch4.2.1
VendorProductVersionCPE
isecsoftanti-trojan_elite*cpe:2.3:a:isecsoft:anti-trojan_elite:*:*:*:*:*:*:*:*
isecsoftanti-trojan_elite4.1.9cpe:2.3:a:isecsoft:anti-trojan_elite:4.1.9:*:*:*:*:*:*:*
isecsoftanti-trojan_elite4.2.0cpe:2.3:a:isecsoft:anti-trojan_elite:4.2.0:*:*:*:*:*:*:*
isecsoftanti-trojan_elite4.2.1cpe:2.3:a:isecsoft:anti-trojan_elite:4.2.1:*:*:*:*:*:*:*

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

High

EPSS

0

Percentile

0.4%

Related for CVE-2008-5048