Lucene search
HistoryNov 13, 2008 - 2:30 a.m.
CVE-2008-5049
cve-2008-5049
buffer overflow
akeprotect.sys
isecsoft anti-keylogger elite
privilege escalation
local users
nvd
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Buffer overflow in AKEProtect.sys 3.3.3.0 in ISecSoft Anti-Keylogger Elite 3.3.0 and earlier, and possibly other versions including 3.3.3, allows local users to gain privileges via long inputs to the (1) 0x002224A4, (2) 0x002224C0, and (3) 0x002224CC IOCTL.
Affected configurations
Node
isecsoftanti-keylogger_eliteRange≤3.3.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| isecsoft:anti-keylogger_elite | isecsoft anti-keylogger elite | le | 3.3.0 |
Related
nvd
nvd
CVE-2008-5049
2008-11-13 02:30:00
cvelist
cvelist
CVE-2008-5049
2008-11-13 01:00:00
prion
prion
Buffer overflow
2008-11-13 02:30:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2008-5049