CVE-2008-5724
26.12.2008, 17:30
The Personal Firewall driver (aka epfw.sys) 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows local users to gain privileges via a crafted IRP in a certain METHOD_NEITHER IOCTL request to \Device\Epfw that overwrites portions of memory.Enginsight
| Vendor | Product | Version |
|---|---|---|
| eset | smart_security | 𝑥 ≤ 3.0.672 |
| eset | smart_security | 3.0.551 |
| eset | smart_security | 3.0.560 |
| eset | smart_security | 3.0.563 |
| eset | smart_security | 3.0.621 |
| eset | smart_security | 3.0.642 |
| eset | smart_security | 3.0.650 |
| eset | smart_security | 3.0.657 |
| eset | smart_security | 3.0.667 |
| eset | smart_security | 3.0.669 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References