ESET多款产品 安全漏洞

ESET NOD32 Antivirus and others are products of ESET Corporation.ESET NOD32 Antivirus is an antivirus program.ESET Internet Security is an advanced antivirus with antivirus.ESET Smart Security Premium is an antivirus program that includes data encryption, ESET Smart Security Premium is a network...

CVE-2015-8841

Heap-based buffer overflow in the Archive support module in ESET NOD32 before update 11861 allows remote attackers to execute arbitrary code via a large number of languages in an EPOC installation file of type SISFILEMULTILANG...

ESET多款产品 安全漏洞

ESET Endpoint Antivirus and others are products of ESET Corporation.ESET Endpoint Antivirus is an on-premise and cloud-based anti-malware and security suite for small, medium and large businesses.ESET Security is a line of security antivirus software.ESET NOD32 Antivirus is an antivirus program. ...

ESET NOD32 Antivirus 18.0.12.0 Unquoted Service Path

Exploit Title: ESET NOD32 Antivirus 18.0.12.0 - "ESET Service" Unquoted Service Path Exploit Author: Milad Karimi Ex3ptionaL Exploit Date: 2024-11-02 Contact: [email protected] Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL MiRROR-H: https://mirror-h.org/search/hacker/49626/ Vendor :...

ESET NOD32 Antivirus 17.2.7.0 Unquoted Service Path

Exploit Title: ESET NOD32 Antivirus 17.2.7.0 - Unquoted Service Path Exploit Author: Milad Karimi Ex3ptionaL Exploit Date: 2024-07-09 Contact: [email protected] Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL Vendor : https://www.eset.com Version : 17.2.7.0 Tested on OS: Microsoft Windows...

ESET NOD32 Antivirus 17.1.11.0 Unquoted Service Path

Exploit Title: ESET NOD32 Antivirus 17.1.11.0 - Unquoted Service Path Exploit Author: Milad Karimi Ex3ptionaL Exploit Date: 2024-04-27 Contact: [email protected] Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL Vendor : https://www.eset.com Version : 17.1.11.0 Tested on OS: Microsoft Windo...

ESET NOD32 Antivirus 17.1.11.0 Unquoted Service Path Vulnerability

Exploit Title: ESET NOD32 Antivirus 17.1.11.0 - Unquoted Service Path Exploit Author: Milad Karimi Ex3ptionaL Exploit Date: 2024-04-27 Contact: email protected Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL Vendor : https://www.eset.com Version : 17.1.11.0 Tested on OS: Microsoft Windows 10 p...

ESET NOD32 Antivirus 17.0.16.0 - Unquoted Service Path

Exploit Title: ESET NOD32 Antivirus 17.0.16.0 - Unquoted Service Path Exploit Author: Milad Karimi Ex3ptionaL Exploit Date: 2024-04-01 Vendor : https://www.eset.com Version : 17.0.16.0 Tested on OS: Microsoft Windows 10 pro x64 C:\wmic service get name,displayname,pathname,startmode |findstr /i...

ESET NOD32 Antivirus 17.0.16.0 Unquoted Service Path

Exploit Title: ESET NOD32 Antivirus 17.0.16.0 - Unquoted Service Path Exploit Author: Milad Karimi Ex3ptionaL Exploit Date: 2024-04-01 Vendor : https://www.eset.com Version : 17.0.16.0 Tested on OS: Microsoft Windows 10 pro x64 C:\wmic service get name,displayname,pathname,startmode |findstr /i...

ESET NOD32 Antivirus 17.0.16.0 - Unquoted Service Path Vulnerability

Exploit Title: ESET NOD32 Antivirus 17.0.16.0 - Unquoted Service Path Exploit Author: Milad Karimi Ex3ptionaL Vendor : https://www.eset.com Version : 17.0.16.0 Tested on OS: Microsoft Windows 10 pro x64 C:\wmic service get name,displayname,pathname,startmode |findstr /i "auto" |findstr /i /v...

Design/Logic Flaw

Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair feature of the installer to run malicious code with higher privileges. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o...

ESET NOD32 Antivirus 权限许可和访问控制问题漏洞

ESET NOD32 Antivirus is a suite of antivirus software from ESET Slovakia. ESET NOD32 Antivirus suffers from a Permission License and Access Control Issue vulnerability that stems from the product not properly imposing security restrictions when using named pipes, which could lead to security...

CVE-2020-26941

A local authenticated low-privileged user can exploit a behavior in an ESET installer to achieve arbitrary file overwrite deletion of any file via a symlink, due to insecure permissions. The possibility of exploiting this vulnerability is limited and can only take place during the installation...

PT-2021-2195

Name of the Vulnerable Software and Affected Versions: ESET NOD32 Antivirus versions 13.2 and lower ESET Internet Security versions 13.2 and lower ESET Smart Security versions 13.2 and lower ESET Smart Security Premium versions 13.2 and lower ESET Endpoint Antivirus versions 7.3 and lower ESET...

CVE-2020-10193

ESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression Information in an archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro macOS, Cyber Security macOS, Mobile Security for Android...

Design/Logic Flaw

ESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression Information in an archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro macOS, Cyber Security macOS, Mobile Security for Android...

CVE-2020-10193

ESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression Information in an archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro macOS, Cyber Security macOS, Mobile Security for Android...

PT-2020-11966

Name of the Vulnerable Software and Affected Versions ESET Smart Security Premium versions prior to 1294 ESET Internet Security versions prior to 1294 ESET NOD32 Antivirus versions prior to 1294 ESET Cyber Security Pro macOS versions prior to 1294 ESET Cyber Security macOS versions prior to 1294...

CVE-2020-10193: Interpretation Conflict

ESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression Information in an archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro macOS, Cyber Security macOS, Mobile Security for Android...

Design/Logic Flaw

The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro macOS, Cyber Security macOS, Mobile Security for Android, Smart TV Security,...