CVE-2008-5724

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-12-26 · updated 2026-06-16
Weakness: CWE-264

Description

The Personal Firewall driver (aka epfw.sys) 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows local users to gain privileges via a crafted IRP in a certain METHOD_NEITHER IOCTL request to \Device\Epfw that overwrites portions of memory.

Affected products

ESET Smart Security: through 3.0.672; 3.0.551, 3.0.560, 3.0.563, 3.0.621, 3.0.642, 3.0.650 (+3)

References

http://secunia.com/advisories/33210
http://www.eset.com/joomla/index.php?option=com_content&task=view&id=4113&Itemid=5
http://www.ntinternals.org/ntiadv0807/ntiadv0807.html
http://www.securityfocus.com/bid/32917
http://www.vupen.com/english/advisories/2008/3456
https://exchange.xforce.ibmcloud.com/vulnerabilities/47477
http://secunia.com/advisories/33210
http://www.eset.com/joomla/index.php?option=com_content&task=view&id=4113&Itemid=5
http://www.ntinternals.org/ntiadv0807/ntiadv0807.html
http://www.securityfocus.com/bid/32917
http://www.vupen.com/english/advisories/2008/3456
https://exchange.xforce.ibmcloud.com/vulnerabilities/47477

Get alerted when CVE-2008-5724 or the next vulnerability affects your stack