CVE-2018-0649
Untrusted search path vulnerability in the installers of multiple Canon IT Solutions Inc. software programs (ESET Smart Security Premium, ESET Internet Security, ESET Smart Security, ESET NOD32 Antivirus, DESlock+ Pro, and CompuSec (all programs except packaged ones)) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
- Score
- CVSS 3.0 7.8 High
- Status
- Modified - vultures@jpcert.or.jp
- Published
- 2018-09-07
- Last modified
- 2024-08-05
- Weaknesses
- CWE-426
Affected products
- The Installers Of Multiple Canon It Solutions Inc. Software Programs (Canon It Solutions Inc.)
- Compusec (Eset)
- Deslock+ Pro (Eset)
- Internet Security (Eset)
- Nod32 Antivirus (Eset)
- Smart Security (Eset)
- Smart Security Premium (Eset)
References
- http://jvn.jp/en/jp/JVN41452671/index.html
- https://eset-support.canon-its.jp/faq/show/10720?site_domain=default
