7.2
CVE-2008-5724
- EPSS 0.21%
- Published 26.12.2008 17:30:00
- Last modified 09.04.2025 00:30:58
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
The Personal Firewall driver (aka epfw.sys) 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows local users to gain privileges via a crafted IRP in a certain METHOD_NEITHER IOCTL request to \Device\Epfw that overwrites portions of memory.
Data is provided by the National Vulnerability Database (NVD)
Eset ≫ Smart Security Version <= 3.0.672
Eset ≫ Smart Security Version3.0.551
Eset ≫ Smart Security Version3.0.560
Eset ≫ Smart Security Version3.0.563
Eset ≫ Smart Security Version3.0.621
Eset ≫ Smart Security Version3.0.642
Eset ≫ Smart Security Version3.0.650
Eset ≫ Smart Security Version3.0.657
Eset ≫ Smart Security Version3.0.667
Eset ≫ Smart Security Version3.0.669
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.21% | 0.406 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.2 | 3.9 | 10 |
AV:L/AC:L/Au:N/C:C/I:C/A:C
|