Skip to content
OpenAdvisories
High · 7.3 CVE-2024-2003 EUVD-2024-26973GHSA-jxcm-cf67-2rxc

Local Privilege Escalation in Quarantine of ESET products for Windows

Published Jun 21, 2024 · Updated Aug 1, 2024 · Assigned by ESET

Vendor: ESET spol. s.r.o. Product: ESET Endpoint Antivirus for Windows Product: ESET Endpoint Security for Windows Product: ESET File Security for Microsoft Azure Product: ESET Internet Security Product: ESET Mail Security for IBM Domino Product: ESET Mail Security for Microsoft Exchange Server Product: ESET NOD32 Antivirus Product: ESET Safe Server Product: ESET Security for Microsoft SharePoint Server Product: ESET Security Ultimate Product: ESET Server Security for Windows Server Product: ESET Small Business Security Product: ESET Smart Security Premium Platform: Windows

Description

Local privilege escalation vulnerability allowed an attacker to misuse ESET's file operations during a restore operation from quarantine.

Affected products

VendorProductAffectedFixed
ESET, spol. s r.o. ESET NOD32 Antivirus < 1610 1610
ESET, spol. s r.o. ESET Internet Security < 1610 1610
ESET, spol. s r.o. ESET Smart Security Premium < 1610 1610
ESET, spol. s r.o. ESET Security Ultimate < 1610 1610
ESET, spol. s r.o. ESET Small Business Security < 1610 1610
ESET, spol. s r.o. ESET Safe Server < 1610 1610
ESET, spol. s r.o. ESET Endpoint Antivirus for Windows < 1610 1610
ESET, spol. s r.o. ESET Endpoint Security for Windows < 1610 1610
ESET, spol. s r.o. ESET Server Security for Windows Server < 1610 1610
ESET, spol. s r.o. ESET Mail Security for Microsoft Exchange Server < 1610 1610
ESET, spol. s r.o. ESET Mail Security for IBM Domino < 1610 1610
ESET, spol. s r.o. ESET Security for Microsoft SharePoint Server < 1610 1610
ESET, spol. s r.o. ESET File Security for Microsoft Azure < 1610 1610

Advisories 1

References