CVE:CVE-2018-0649
CNNVD:CNNVD-201809-412
Canon IT Solutions 2018 ESET Smart Security Premium等都是日本Canon IT Solutions公司的产品。Canon IT Solutions 2018 ESET Smart Security Premium是一套杀毒软件。DESlock+ Pro是一套企业文件加密软件。installer是其中的安装程序。
多款Canon IT Solutions产品中的installer 2018-7-10之前版本存在安全漏洞。攻击者可借助目录中恶意的DLL利用该漏洞获取权限。以下产品受到影响：Canon IT Solutions 2018 ESET Smart Security Premium；ESET Internet Security；ESET Smart Security；ESET NOD32 Antivirus；DESlock+ Pro；CompuSec。
solution:Upgrade eset compusec to a higher version than -; Upgrade eset deslock+_pro to a higher version than -; Upgrade eset internet_security to a higher version than -; Upgrade eset nod32_antivirus to a higher version than -; Upgrade eset smart_security to a higher version than -; Upgrade eset smart_security_premium to a higher version than -