Total vulnerabilities in the database
Unquoted service path in ESET products allows to
drop a prepared program to a specific location and run on boot with the
NT AUTHORITY\NetworkService permissions.
| Software | From | Fixed in |
|---|---|---|
| eset / mail_security | 10.1.10012.0 | 10.1.10012.0.x |
| eset / smart_security_premium | 16.1.14.0 | 17.0.15.0 |
| eset / internet_security | 16.1.14.0 | 17.0.15.0 |
| eset / nod32_antivirus | 16.1.14.0 | 17.0.15.0 |
| eset / endpoint_antivirus | 10.1.2046.0 | 11.0.2032.0 |
| eset / endpoint_security | 10.1.2046.0 | 11.0.2032.0 |