PT-2018-8988 · Ce Infosys+2 · Compusec+5
Yuji Tounai
·
Publicado
2018-09-07
·
Atualizado
2018-11-19
·
CVE-2018-0649
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
ESET Smart Security Premium (affected versions not specified)
ESET Internet Security (affected versions not specified)
ESET Smart Security (affected versions not specified)
ESET NOD32 Antivirus (affected versions not specified)
DESlock+ Pro (affected versions not specified)
CompuSec (affected versions not specified, except packaged ones)
Description
The issue is related to an untrusted search path vulnerability in the installers of multiple software programs. This vulnerability allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Recommendations
For ESET Smart Security Premium, update to a version that includes a fix for this issue.
For ESET Internet Security, update to a version that includes a fix for this issue.
For ESET Smart Security, update to a version that includes a fix for this issue.
For ESET NOD32 Antivirus, update to a version that includes a fix for this issue.
For DESlock+ Pro, update to a version that includes a fix for this issue.
For CompuSec, update to a version that includes a fix for this issue, excluding packaged versions.
Correção
Untrusted Search Path
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Compusec
Deslock+ Pro
Eset Internet Security
Eset Nod32 Antivirus
Eset Smart Security
Eset Smart Security Premium