The vulnerability of the ESET NOD32 antivirus protection allows a perpetrator to execute arbitrary code.

The vulnerability of the archive support module of the ESET NOD32 antivirus software arises due to an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by setting a high value for the language used in the installation fi...

ESET NOD32 Archive support module heap buffer overflow vulnerability

ESET NOD32 is a suite of antivirus programs from ESET Slovakia. A heap buffer overflow vulnerability exists in the Archive support module of ESET NOD32 update prior to version 11861. A remote attacker can exploit this vulnerability to execute arbitrary code with the help of a large number of...

CVE-2015-8841

Heap-based buffer overflow in the Archive support module in ESET NOD32 before update 11861 allows remote attackers to execute arbitrary code via a large number of languages in an EPOC installation file of type SISFILEMULTILANG...

Heap overflow

Heap-based buffer overflow in the Archive support module in ESET NOD32 before update 11861 allows remote attackers to execute arbitrary code via a large number of languages in an EPOC installation file of type SISFILEMULTILANG...

CVE-2015-8841

Heap-based buffer overflow in the Archive support module in ESET NOD32 before update 11861 allows remote attackers to execute arbitrary code via a large number of languages in an EPOC installation file of type SISFILEMULTILANG...

CVE-2015-8841

CVE-2015-8841 describes a heap-based buffer overflow in the Archive support module of ESET NOD32 prior to update 11861. The issue can be triggered by a SIS_FILE_MULTILANG EPOC installation file containing a large number of languages, allowing a remote attacker to execute arbitrary code with the p...

PT-2016-1797 · Eset · Eset Nod32 Antivirus

Name of the Vulnerable Software and Affected Versions: ESET NOD32 versions before update 11861 Description: The issue is related to a heap-based buffer overflow in the Archive support module. This can be exploited by remote attackers to execute arbitrary code via a large number of languages in an...

ESET Endpoint Security - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application ESET Endpoint Security published at the 'play' market has multiple vulnerabilities...

Warning! Think Twice Before Using USB Drives

Security researchers have discovered a new data-stealing Trojan that makes special use of USB devices in order to spread itself and does not leave any trace of activity on the compromised systems. Dubbed USB Thief or Win32/PSW.Stealer.NAI, the malware has the capability of stealthy attacking...

How To Keep Your Android Phone Secure

As the number of threats is on the rise, Android platform is no longer safe, which isn't a surprise to anyone. Most of us are usually worried more about the security of our desktops or laptops and forget to think about the consequences our smartphones can make if compromised or stolen. Unlike...

ESET NOD32 Antivirus DLL Hijacking

Hi @ll, the executable installer ° of ESET's NOD32 antivirus, esetnod32antivirusliveinstaller.exe, loads and executes at least the rogue/bogus/malicious Cabinet.dll and DbgHelp.dll eventually found in the directory it is started from ' the "application directory". For software downloaded with a w...

Microsoft, Law Enforcement Collaborate in Dorkbot Takedown

A coalition of law enforcement agencies worked together recently to disrupt Dorkbot, a botnet that’s managed to infect more than one million machines in 190 countries during the last year. Researchers with Microsoft’s Malware Protection Center announced the news via a post on the MMPC blog. Two...

eset.entelechargement.com XSS vulnerability

Vulnerable URL: http://eset.entelechargement.com/antivirus/eset-nod32-antivirus.html?'"--...

Analysis of the latest firefox 0day attack-vulnerability warning-the black bar safety net

! /Article/UploadPic/2015-8/2015813114114594.jpg The Mozilla Foundation in the 8 May 6, as Firefox released a security update to fix the Firefox embedded PDF reader pdf. js in the cve-2 0 1 5-4 4 9 5 vulnerability. The vulnerability allows an attacker to bypass the same origin policy,in the local...

Arbitrary Command Execution Vulnerability in Multiple ESET Products

ESET is a world-renowned computer security software company based in Bratislava, Slovakia. An arbitrary command execution vulnerability exists in several ESET products, which allows an attacker to exploit this vulnerability to execute arbitrary commands with root privileges and take full control ...

ESET NOD32 Anti-Virus Emulation Remote Code Execution

A Remote Code Execution vulnerability has been reported in ESET's NOD32 Anti-Virus products. A successful exploitation of this vulnerability can allow code execution with the privileges of the affected product...

Analysis and Exploitation of an ESET Vulnerability

Do we understand the risk vs. benefit trade-offs of security software? Tavis Ormandy, June 2015 Introduction Many antivirus products include emulation capabilities that are intended to allow unpackers to run for a few cycles before signatures are applied. ESET NOD32 uses a minifilter or kext to...

Malicious Minecraft apps affect 600,000 Android Users

So you love Minecraft? You might want to be very careful before downloading the cheats for the popular Minecraft game from Google Play Store. Nearly 3 Million users have downloaded malicious Minecraft Android applications for their smartphone and tablets from the Google Play store, security...

CVE-2014-4974

The ESET Personal Firewall NDIS filter EpFwNdis.sys kernel mode driver, aka Personal Firewall module before Build 1212 20140609, as used in multiple ESET products 5.0 through 7.0, allows local users to obtain sensitive information from kernel memory via crafted IOCTL calls...

Memory corruption

The ESET Personal Firewall NDIS filter EpFwNdis.sys kernel mode driver, aka Personal Firewall module before Build 1212 20140609, as used in multiple ESET products 5.0 through 7.0, allows local users to obtain sensitive information from kernel memory via crafted IOCTL calls...