CVE-2014-4973: Input Validation
First published: Tue Sep 23 2014(Updated: )
The ESET Personal Firewall NDIS filter (EpFwNdis.sys) driver in the Firewall Module Build 1183 (20140214) and earlier in ESET Smart Security and ESET Endpoint Security products 5.0 through 7.0 allows local users to gain privileges via a crafted argument to a 0x830020CC IOCTL call.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| ESET Smart Security | =5.0.94 | |
| ESET Smart Security | =5.0.95 | |
| ESET Smart Security | =5.2.9 | |
| ESET Smart Security | =5.2.15 | |
| ESET Smart Security | =6.0.306 | |
| ESET Smart Security | =6.0.308 | |
| ESET Smart Security | =6.0.314 | |
| ESET Smart Security | =6.0.316 | |
| Eset Endpoint Security | =5.0.2113 | |
| Eset Endpoint Security | =5.0.2122 | |
| Eset Endpoint Security | =5.0.2126 | |
| Eset Endpoint Security | =5.0.2214 | |
| Eset Endpoint Security | =5.0.2225 | |
| Eset Endpoint Security | =5.0.2228 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/references
- agent/type
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/weakness
- agent/author
- agent/severity
- agent/tags
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/eset
- canonical/eset smart security
- version/eset smart security/5.0.94
- version/eset smart security/5.0.95
- version/eset smart security/5.2.9
- version/eset smart security/5.2.15
- version/eset smart security/6.0.306
- version/eset smart security/6.0.308
- version/eset smart security/6.0.314
- version/eset smart security/6.0.316
- canonical/eset endpoint security
- version/eset endpoint security/5.0.2113
- version/eset endpoint security/5.0.2122
- version/eset endpoint security/5.0.2126
- version/eset endpoint security/5.0.2214
- version/eset endpoint security/5.0.2225
- version/eset endpoint security/5.0.2228