Vulnerabilities > Eset > Smart Security
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2018-09-07 | CVE-2018-0649 | Untrusted Search Path vulnerability in Eset products Untrusted search path vulnerability in the installers of multiple Canon IT Solutions Inc. | 9.3 |
| 2014-09-23 | CVE-2014-4973 | Improper Input Validation vulnerability in Eset Endpoint Security and Smart Security The ESET Personal Firewall NDIS filter (EpFwNdis.sys) driver in the Firewall Module Build 1183 (20140214) and earlier in ESET Smart Security and ESET Endpoint Security products 5.0 through 7.0 allows local users to gain privileges via a crafted argument to a 0x830020CC IOCTL call. | 6.9 |
| 2009-08-28 | CVE-2008-7107 | Improper Input Validation vulnerability in Eset Smart Security 3.0.667.0 easdrv.sys in ESET Smart Security 3.0.667.0 allows local users to cause a denial of service (crash) via a crafted IOCTL 0x222003 request to the \\.\easdrv device interface. | 7.2 |
| 2008-12-26 | CVE-2008-5724 | Permissions, Privileges, and Access Controls vulnerability in Eset Smart Security The Personal Firewall driver (aka epfw.sys) 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows local users to gain privileges via a crafted IRP in a certain METHOD_NEITHER IOCTL request to \Device\Epfw that overwrites portions of memory. | 7.2 |
| 2008-12-12 | CVE-2008-5527 | Improper Input Validation vulnerability in Eset Smart Security 3.0 ESET Smart Security, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit. | 9.3 |