CVE-2018-0649

Published: Sep 7, 2018Modified: Nov 21, 2024

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Untrusted search path vulnerability in the installers of multiple Canon IT Solutions Inc. software programs (ESET Smart Security Premium, ESET Internet Security, ESET Smart Security, ESET NOD32 Antivirus, DESlock+ Pro, and CompuSec (all programs except packaged ones)) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected (6)

Products: Eset: Compusec, Deslock+ Pro, Internet Security, Nod32 Antivirus, Smart Security, Smart Security Premium

6 products

Smart Security Premium

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Eset Compusec	All versions
Eset Deslock+ Pro	All versions
Eset Internet Security	All versions
Eset Nod32 Antivirus	All versions
Eset Smart Security	All versions
Eset Smart Security Premium	All versions