« Volver al listado

CVE-2008-5724

Estado: ModificadaAlta (7.2)—

The Personal Firewall driver (aka epfw.sys) 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows local users to gain privileges via a crafted IRP in a certain METHOD_NEITHER IOCTL request to \Device\Epfw that overwrites portions of memory.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Eset — Smart Security

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2008-5724",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.2,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2008-12-26T17:30:00.563",
  "references": [
    {
      "url": "http://secunia.com/advisories/33210",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.eset.com/joomla/index.php?option=com_content&task=view&id=4113&Itemid=5",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.ntinternals.org/ntiadv0807/ntiadv0807.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/32917",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2008/3456",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47477",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/33210",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.eset.com/joomla/index.php?option=com_content&task=view&id=4113&Itemid=5",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ntinternals.org/ntiadv0807/ntiadv0807.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/32917",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2008/3456",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47477",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Personal Firewall driver (aka epfw.sys) 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows local users to gain privileges via a crafted IRP in a certain METHOD_NEITHER IOCTL request to \\Device\\Epfw that overwrites portions of memory."
    },
    {
      "lang": "es",
      "value": "El driver de Personal Firewall (también conocido como epfw.sys) 3.0.672.0 y anteriores en ESET Smart Security 3.0.672 y anteriores permite a usuarios locales obtener privilegios mediante un IRP manipulado en una petición METHOD_NEITHER IOCTL a \\Device\\Epfw que sobrescribe porciones de memoria."
    }
  ],
  "lastModified": "2026-06-16T23:00:52.977",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:eset:smart_security:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D3C2CFB8-20F3-4771-ABF3-B39EC52C0C1F",
              "versionEndIncluding": "3.0.672"
            },
            {
              "criteria": "cpe:2.3:a:eset:smart_security:3.0.551:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9E4614B9-9546-49EF-965E-D545C0D8D05D"
            },
            {
              "criteria": "cpe:2.3:a:eset:smart_security:3.0.560:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C782CED1-3314-4F26-9F45-3349993676AB"
            },
            {
              "criteria": "cpe:2.3:a:eset:smart_security:3.0.563:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7921FB99-64B5-447A-9E80-E1D92655D593"
            },
            {
              "criteria": "cpe:2.3:a:eset:smart_security:3.0.621:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1C2AAA1D-9816-401F-AD46-1E20681E5EE6"
            },
            {
              "criteria": "cpe:2.3:a:eset:smart_security:3.0.642:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "230BE4DC-8FF9-4B19-A003-97F935681937"
            },
            {
              "criteria": "cpe:2.3:a:eset:smart_security:3.0.650:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4D069AC5-87F9-44DF-818E-D6B4902C5C06"
            },
            {
              "criteria": "cpe:2.3:a:eset:smart_security:3.0.657:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2FFB0EE7-1355-4292-901E-BB214767D2AF"
            },
            {
              "criteria": "cpe:2.3:a:eset:smart_security:3.0.667:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4E07A232-9611-4845-990B-FB455CE38D09"
            },
            {
              "criteria": "cpe:2.3:a:eset:smart_security:3.0.669:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ED4D97E2-BA73-40ED-9B72-A2769306E473"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}