CVE-2008-5724

The Personal Firewall driver (aka epfw.sys) 3.0.672.0 and earlier in ESET Smart Security 3.0.672...

7.2 HighPublic exploit

The Personal Firewall driver (aka epfw.sys) 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows local users to gain privileges via a crafted IRP in a certain METHOD_NEITHER IOCTL request to \Device\Epfw that overwrites portions of memory.

Exploit likelihood

0.80%Down 1.1 points since Feb 4, 2022

What each source reports

NVD Score used 7.2

Record: CVE-2008-5724
CVSS 2.0: 7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness: CWE-264
Updated: 2026-11-02

CVE List No score

Record: CVE-2008-5724
Updated: 2026-11-02

EUVDEUVD-2008-5694 No score

Record: EUVD-2008-5694
Updated: 2026-11-03

GitHub AdvisoriesGHSA-5cvq-8gr9-5xpq No score

The Personal Firewall driver (aka epfw.sys) 3.0.672.0 and earlier in ESET Smart Security 3.0.672...

Record: GHSA-5cvq-8gr9-5xpq
Updated: 2026-11-02

Affected products

eset smart security

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	ESET Smart Security 3.0.672 - 'epfw.sys' Local Privilege Escalation	2008-12-18

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-5724 is a high vulnerability (CVSS 7.2) in Eset Smart Security, published December 26, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.80%, the 56th percentile. No source names a fixed version.