Description
ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT AUTHORITY\SYSTEM.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ESET | ESET NOD32 Antivirus | 10.0.337.1 – ≤ 15.0.18.0 | — |
| ESET | ESET Internet Security | 10.0.337.1 – ≤ 15.0.18.0 | — |
| ESET | ESET Smart Security | 10.0.337.1 – ≤ 15.0.18.0 | — |
| ESET | ESET Endpoint Antivirus for Windows | 6.6.2046.0 – ≤ 9.0.2032.4 | — |
| ESET | ESET Endpoint Security for Windows | 6.6.2046.0 – ≤ 9.0.2032.4 | — |
| ESET | ESET Server Security for Microsoft Windows Server | 8.0.12003.0 – ≤ 8.0.12003.1 | — |
| ESET | ESET File Security for Microsoft Windows Server | 7.0.12014.0 – ≤ 7.3.12006.0 | — |
| ESET | ESET Server Security for Microsoft Azure | 7.0.12016.1002 – ≤ 7.2.12004.1000 | — |
| ESET | ESET Security for Microsoft SharePoint Server | 7.0.15008.0 – ≤ 8.0.15004.0 | — |
| ESET | ESET Mail Security for IBM Domino | 7.0.14008.0 – ≤ 8.0.14004.0 | — |
| ESET | ESET Mail Security for Microsoft Exchange Server | 7.0.10019 – ≤ 8.0.10016.0 | — |