Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2024-11859

DLL Search Order Hijacking in ESET products for Windows

Description

DLL Search Order Hijacking vulnerability potentially allowed an attacker with administrator privileges to load a malicious dynamic-link library and execute its code.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ESET, spol. s r.o. ESET NOD32 Antivirus

Default version status: unaffected

  • 0 to ≤ 18.0.12.0affected

ESET, spol. s r.o. ESET Internet Security

Default version status: unaffected

  • 0 to ≤ 18.0.12.0affected

ESET, spol. s r.o. ESET Smart Security Premium

Default version status: unaffected

  • 0 to ≤ 18.0.12.0affected

ESET, spol. s r.o. ESET Security Ultimate

Default version status: unaffected

  • 0 to ≤ 18.0.12.0affected

ESET, spol. s r.o. ESET Endpoint Antivirus for Windows

Default version status: unaffected

  • 0 to ≤ 12.0.2038.0affected
  • 0 to ≤ 11.1.2053.2affected

ESET, spol. s r.o. ESET Endpoint Security for Windows

Default version status: unaffected

  • 0 to ≤ 12.0.2038.0affected
  • 0 to ≤ 11.1.2053.2affected

ESET, spol. s r.o. ESET Small Business Security

Default version status: unaffected

  • 0 to ≤ 18.0.12.0affected

ESET, spol. s r.o. ESET Safe Server

Default version status: unaffected

  • 0 to ≤ 18.0.12.0affected

ESET, spol. s r.o. ESET Server Security for Windows Server

Default version status: unaffected

  • 0 to ≤ 11.1.12005.2affected

ESET, spol. s r.o. ESET Mail Security for Microsoft Exchange Server

Default version status: unaffected

  • 0 to ≤ 11.1.10008.0affected
  • 0 to ≤ 11.0.10008.0affected
  • 0 to ≤ 10.1.10014.0affected

ESET, spol. s r.o. ESET Security for Microsoft SharePoint Server

Default version status: unaffected

  • 0 to ≤ 11.1.15001.0affected
  • 0 to ≤ 11.0.15004.0affected
  • 0 to ≤ 10.0.15005.1affected

References