TOCTOU race condition vulnerability in ESET products on Windows
Time-of-check to time-of-use race condition vulnerability potentially allowed an attacker to use the installed ESET security software to clear the content of an arbitrary file on the file system.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
ESET NOD32 Antivirus
Vendor
ESET, spol. s.r.o
Product
ESET NOD32 Antivirus
Platforms
Unknown
Default status
unaffected
ESET NOD32 Antivirus · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
18.1.13.0
None listed
ESET Internet Security
Vendor
ESET, spol. s.r.o
Product
ESET Internet Security
Platforms
Unknown
Default status
unaffected
ESET Internet Security · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
18.1.13.0
None listed
ESET Smart Security Premium
Vendor
ESET, spol. s.r.o
Product
ESET Smart Security Premium
Platforms
Unknown
Default status
unaffected
ESET Smart Security Premium · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
18.1.13.0
None listed
ESET Security Ultimate
Vendor
ESET, spol. s.r.o
Product
ESET Security Ultimate
Platforms
Unknown
Default status
unaffected
ESET Security Ultimate · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
18.1.13.0
None listed
ESET Endpoint Antivirus for Windows
Vendor
ESET, spol. s.r.o
Product
ESET Endpoint Antivirus for Windows
Platforms
Unknown
Default status
unaffected
ESET Endpoint Antivirus for Windows · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
12.0.2049.0
None listed
0
affected
custom
Unavailable
11.1.2059.0
None listed
ESET Endpoint Security for Windows
Vendor
ESET, spol. s.r.o
Product
ESET Endpoint Security for Windows
Platforms
Unknown
Default status
unaffected
ESET Endpoint Security for Windows · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
12.0.2049.0
None listed
0
affected
custom
Unavailable
11.1.2059.0
None listed
ESET Small Business Security
Vendor
ESET, spol. s.r.o
Product
ESET Small Business Security
Platforms
Unknown
Default status
unaffected
ESET Small Business Security · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
18.1.13.0
None listed
ESET Safe Server
Vendor
ESET, spol. s.r.o
Product
ESET Safe Server
Platforms
Unknown
Default status
unaffected
ESET Safe Server · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
18.1.13.0
None listed
ESET Server Security for Windows Server
Vendor
ESET, spol. s.r.o
Product
ESET Server Security for Windows Server
Platforms
Unknown
Default status
unaffected
ESET Server Security for Windows Server · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
12.0.12004.0
None listed
0
affected
custom
Unavailable
11.1.12009.1
None listed
ESET Mail Security for Microsoft Exchange Server
Vendor
ESET, spol. s.r.o
Product
ESET Mail Security for Microsoft Exchange Server
Platforms
Unknown
Default status
unaffected
ESET Mail Security for Microsoft Exchange Server · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
12.0.10003.0
None listed
0
affected
custom
Unavailable
11.1.10011.0
None listed
ESET Security for Microsoft SharePoint Server
Vendor
ESET, spol. s.r.o
Product
ESET Security for Microsoft SharePoint Server
Platforms
Unknown
Default status
unaffected
ESET Security for Microsoft SharePoint Server · Scoped product and version facts