Medium WID-SEC-2025-0737 1 CVE

ESET NOD32 Antivirus, Endpoint Security and Server Security: Schwachstelle ermöglicht Codeausführung

Published Apr 7, 2025 · Updated Apr 7, 2025 · de-DE

Vendor: ESET Product: Endpoint Security Product: NOD32 Antivirus Product: Server Security Platform: Windows

Summary

Ein lokaler Angreifer kann eine Schwachstelle in ESET NOD32 Antivirus ausnutzen, um beliebigen Programmcode auszuführen.

Product

Eset NOD32 Antivirus ist eine Internet Security Lösung.

Vulnerabilities 1

High 8.4

CVE-2024-11859

DLL Search Order Hijacking in ESET products for Windows

DLL Search Order Hijacking vulnerability potentially allowed an attacker with administrator privileges to load a malicious dynamic-link library and execute its code.

ESET spol. s.r.o. ESET NOD32 Antivirus ESET Smart Security Premium ESET Internet Security Windows

Apr 7, 2025

Revision history

2025-04-07 #1
Initiale Fassung

References

ESET Advisory vom 2025-04-07
https://support.eset.com/en/ca8810-dll-search-order-hijacking-vulnerability-in-eset-products-for-windows-fixed
NIST Vulnerability Database vom 2025-04-07
https://nvd.nist.gov/vuln/detail/CVE-2024-11859
Exploit vom 2025-04-07
https://securelist.com/toddycat-apt-exploits-vulnerability-in-eset-software-for-dll-proxying/116086/