PT-2009-2576 · Eset · Eset Smart Security

G · Published 2009-08-28 · Updated 2017-09-29 · CVE-2008-7107

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ESET Smart Security version 3.0.667.0

Description The issue allows local users to cause a denial of service, resulting in a system crash. This is achieved by sending a crafted IOCTL 0x222003 request to the ".easdrv" device interface, specifically targeting the easdrv.sys component.

Recommendations For ESET Smart Security version 3.0.667.0, consider restricting access to the easdrv.sys component to minimize the risk of exploitation. As a temporary workaround, avoid using the IOCTL 0x222003 request to the ".easdrv" device interface until a patch is available.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2008-7107

Affected Products

Eset Smart Security

References · 4

• 🔥 https://exploit-db.com/exploits/6251 · Exploit
• 🔥 http://securityfocus.com/bid/30719 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-7107 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44520 · Note