Denial of Service Vulnerability in ESET Smart Security
CVE-2008-7107

Currently unrated

Key Information:

Vendor

Eset

Status
Smart Security
Vendor
CVE Published:
28 August 2009

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2008-7107?

The easdrv.sys driver in ESET Smart Security version 3.0.667.0 has a vulnerability that allows local users to create a denial of service condition by sending a specially crafted IOCTL request. This could result in the crashing of the software, thereby disrupting the functionality and protection offered by the security suite.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2008-7107 - Proof of Concept

References

https://www.exploit-db.com/exploits/6251
exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/30719
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/44520
vdb-entryx_refsource_XF

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.