CVE-2008-5724 The Personal Firewall driver (aka epfw.sys) 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows local users to gain privileges via a crafted IRP in a certain METHOD_NEITHER IOCTL r...
HighCVSS 7.2
EPSS 0.80%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The Personal Firewall driver (aka epfw.sys) 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows local users to gain privileges via a crafted IRP in a certain METHOD_NEITHER IOCTL request to \Device\Epfw that overwrites portions of memory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| eset smart security | <= 3.0.672 | No fix listed |
| eset smart security | = 3.0.551 | No fix listed |
| eset smart security | = 3.0.560 | No fix listed |
| eset smart security | = 3.0.563 | No fix listed |
| eset smart security | = 3.0.621 | No fix listed |
| eset smart security | = 3.0.642 | No fix listed |
| eset smart security | = 3.0.650 | No fix listed |
| eset smart security | = 3.0.657 | No fix listed |
| eset smart security | = 3.0.667 | No fix listed |
| eset smart security | = 3.0.669 | No fix listed |
References
- 33210 third-party-advisory vendor-advisory
- www.eset.com
- www.ntinternals.org
- 32917 vdb-entry
- ADV-2008-3456 vdb-entry
- smart-security-epfw-privilege-escalation(47477) vdb-entry