CVE-2008-5724

2008-12-2617:30:00

CWE-264

[email protected]

web.nvd.nist.gov

eset smart security

epfw.sys

privilege escalation

cve-2008-5724

nvd

6.5 Medium

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

0.4%

JSON

The Personal Firewall driver (aka epfw.sys) 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows local users to gain privileges via a crafted IRP in a certain METHOD_NEITHER IOCTL request to \Device\Epfw that overwrites portions of memory.

Affected configurations

NVD

Node

esetsmart_securityRange≤3.0.672

esetsmart_securityMatch3.0.551

esetsmart_securityMatch3.0.560

esetsmart_securityMatch3.0.563

esetsmart_securityMatch3.0.621

esetsmart_securityMatch3.0.642

esetsmart_securityMatch3.0.650

esetsmart_securityMatch3.0.657

esetsmart_securityMatch3.0.667

esetsmart_securityMatch3.0.669

CPENameOperatorVersion
eset:smart_securityeset smart securityle3.0.672
eset:smart_securityeset smart securityeq3.0.551
eset:smart_securityeset smart securityeq3.0.560
eset:smart_securityeset smart securityeq3.0.563
eset:smart_securityeset smart securityeq3.0.621
eset:smart_securityeset smart securityeq3.0.642
eset:smart_securityeset smart securityeq3.0.650
eset:smart_securityeset smart securityeq3.0.657
eset:smart_securityeset smart securityeq3.0.667
eset:smart_securityeset smart securityeq3.0.669

CPE	Name	Operator	Version
eset:smart_security	eset smart security	le	3.0.672
eset:smart_security	eset smart security	eq	3.0.551
eset:smart_security	eset smart security	eq	3.0.560
eset:smart_security	eset smart security	eq	3.0.563
eset:smart_security	eset smart security	eq	3.0.621
eset:smart_security	eset smart security	eq	3.0.642
eset:smart_security	eset smart security	eq	3.0.650
eset:smart_security	eset smart security	eq	3.0.657
eset:smart_security	eset smart security	eq	3.0.667
eset:smart_security	eset smart security	eq	3.0.669