← Database

CVE-2008-5724

HIGH CVSS: 7.2 Published: 2008-12-26 Modified: 2026-06-16

Description

The Personal Firewall driver (aka epfw.sys) 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows local users to gain privileges via a crafted IRP in a certain METHOD_NEITHER IOCTL request to \Device\Epfw that overwrites portions of memory.

Affected Platforms

Eset Smart Security

Weakness Type

CWE-264

References