CVE-2008-5725

The NT kernel-mode driver (aka pstrip.sys) 5.0.1.1 and earlier in EnTech Taiwan PowerStrip 3.84 and earlier allows local users to gain privileges via certain IRP parameters in an IOCTL request to \Device\Powerstrip1 that overwrites portions of memory.

Affected products

Ntfs Kernel-Mode Driver, Powerstrip

Entechtaiwan Powerstrip

≤ 3.84, 3.00, 3.01, 3.02, 3.10, 3.11, 3.12, 3.15, 3.16, 3.18, 3.20, 3.25, 3.26, 3.28, 3.29, 3.30, 3.40, 3.43, 3.44, 3.45, 3.46, 3.47, 3.49, 3.50, 3.51, 3.52, 3.53, 3.54, 3.55, 3.56, 3.57, 3.58, 3.59, 3.60, 3.61, 3.62, 3.63, 3.64, 3.65, 3.70

Fix

Available

CVSS 2.0

7.2 HIGH

EPSS

0.8% (56th percentile)

Weakness

CWE-264

NVD status

Modified

Published

2008-12-26