← CVE Intelligence

CVE-2024-11859

DLL Search Order Hijacking in ESET products for Windows PUBLISHED

Description (CNA)

DLL Search Order Hijacking vulnerability potentially allowed an attacker with administrator privileges to load a malicious dynamic-link library and execute its code.

Affected (CNA)

Vendor / productVersions
ESET, spol. s r.o. / ESET NOD32 Antivirusaffected 0 through 18.0.12.0
ESET, spol. s r.o. / ESET Internet Securityaffected 0 through 18.0.12.0
ESET, spol. s r.o. / ESET Smart Security Premiumaffected 0 through 18.0.12.0
ESET, spol. s r.o. / ESET Security Ultimateaffected 0 through 18.0.12.0
ESET, spol. s r.o. / ESET Endpoint Antivirus for Windowsaffected 0 through 12.0.2038.0; affected 0 through 11.1.2053.2
ESET, spol. s r.o. / ESET Endpoint Security for Windowsaffected 0 through 12.0.2038.0; affected 0 through 11.1.2053.2
ESET, spol. s r.o. / ESET Small Business Securityaffected 0 through 18.0.12.0
ESET, spol. s r.o. / ESET Safe Serveraffected 0 through 18.0.12.0
ESET, spol. s r.o. / ESET Server Security for Windows Serveraffected 0 through 11.1.12005.2
ESET, spol. s r.o. / ESET Mail Security for Microsoft Exchange Serveraffected 0 through 11.1.10008.0; affected 0 through 11.0.10008.0; affected 0 through 10.1.10014.0
ESET, spol. s r.o. / ESET Security for Microsoft SharePoint Serveraffected 0 through 11.1.15001.0; affected 0 through 11.0.15004.0; affected 0 through 10.0.15005.1

CWE

CWE-427

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.