PT-2009-2576 · Eset · Eset Smart Security

G · Publicado 2009-08-28 · Atualizado 2017-09-29 · CVE-2008-7107

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ESET Smart Security version 3.0.667.0

Description The issue allows local users to cause a denial of service, resulting in a system crash. This is achieved by sending a crafted IOCTL 0x222003 request to the ".easdrv" device interface, specifically targeting the easdrv.sys component.

Recommendations For ESET Smart Security version 3.0.667.0, consider restricting access to the easdrv.sys component to minimize the risk of exploitation. As a temporary workaround, avoid using the IOCTL 0x222003 request to the ".easdrv" device interface until a patch is available.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2008-7107

Produtos afetados

Eset Smart Security

Referências · 4

• 🔥 https://exploit-db.com/exploits/6251 · Exploit
• 🔥 http://securityfocus.com/bid/30719 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44520 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-7107 · Nota de Segurança