CVE-2008-5725

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-12-26 · updated 2026-06-16
Weakness: CWE-264

Description

The NT kernel-mode driver (aka pstrip.sys) 5.0.1.1 and earlier in EnTech Taiwan PowerStrip 3.84 and earlier allows local users to gain privileges via certain IRP parameters in an IOCTL request to \Device\Powerstrip1 that overwrites portions of memory.

Affected products

Entechtaiwan Powerstrip: through 3.84; 3.00, 3.01, 3.02, 3.10, 3.11, 3.12 (+43)

References

http://secunia.com/advisories/33249
http://securityreason.com/securityalert/4809
http://www.ntinternals.org/ntiadv0810/ntiadv0810.html
http://www.securityfocus.com/bid/32961
https://exchange.xforce.ibmcloud.com/vulnerabilities/47532
https://www.exploit-db.com/exploits/7533
http://secunia.com/advisories/33249
http://securityreason.com/securityalert/4809
http://www.ntinternals.org/ntiadv0810/ntiadv0810.html
http://www.securityfocus.com/bid/32961
https://exchange.xforce.ibmcloud.com/vulnerabilities/47532
https://www.exploit-db.com/exploits/7533

Get alerted when CVE-2008-5725 or the next vulnerability affects your stack