CVE-2018-0649
High
Description
Untrusted search path vulnerability in the installers of multiple Canon IT Solutions Inc. software programs (ESET Smart Security Premium, ESET Internet Security, ESET Smart Security, ESET NOD32 Antivirus, DESlock+ Pro, and CompuSec (all programs except packaged ones)) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
SeverityHigh
CVSS7.8
Exploit probability—
ProductEset Compusec
PublishedSep 7, 2018
First seenSep 7, 2018
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| eset compusec | No range specified | — |
| eset deslock\+_pro | No range specified | — |
| eset internet_security | No range specified | — |
| eset nod32_antivirus | No range specified | — |
| eset smart_security | No range specified | — |
| eset smart_security_premium | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.