CVE-2008-5048

CVE-2008-5048 describes a buffer overflow vulnerability in the Atepmon.sys driver of ISecSoft Anti-Trojan Elite versions 4.2.1 and earlier, potentially affecting 4.2.2. This flaw allows a local attacker to trigger a denial of service (system crash) and possibly execute arbitrary code by providing overly long inputs to a specific IOCTL. With a CVSS score of 7.2, it is considered highly severe due to its local attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While not listed in CISA's KEV catalog or having Metasploit/Nuclei modules, an ExploitDB entry confirms the existence of exploit code for local privilege escalation. Despite this, there is no evidence of active exploitation, and it has received minimal community discussion or media coverage.