CVE-2024-3779

published 2024-07-16

CVE-2024-3779: Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET’s security product…

Priority P4 19 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I N A H

Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET’s security product inoperable, provided non-default preconditions were met.

Affected

19 ranges

Vendor	Product	Version range	Fixed in
eset	endpoint_antivirus	< 11.1.2039.0	11.1.2039.0
eset	endpoint_security	< 11.1.2039.0	11.1.2039.0
eset	internet_security	< 17.2.7.0	17.2.7.0
eset	mail_security	<= 11.0.10008.0	—
eset	nod32	< 17.2.7.0	17.2.7.0
eset	security	< 17.2.7.0	17.2.7.0
eset	security	< 11.0.15004.0	11.0.15004.0
eset	server_security	< 11.0.12012.0	11.0.12012.0
eset	smart_security	< 17.2.7.0	17.2.7.0
eset_s.r.o	eset_endpoint_antivirus_for_windows	<= 11.0.2044.0	—
eset_s.r.o	eset_endpoint_security_for_windows	<= 11.0.2044.0	—
eset_s.r.o	eset_internet_security	<= 17.1.13.0	—
eset_s.r.o	eset_mail_security_for_ibm_domino	—	—
eset_s.r.o	eset_mail_security_for_microsoft_exchange_server	<= 11.0.10005.0	—
eset_s.r.o	eset_nod32_antivirus	<= 17.1.13.0	—
eset_s.r.o	eset_security_for_microsoft_sharepoint_server	<= 11.0.15002.0	—
eset_s.r.o	eset_security_ultimate	<= 17.1.13.0	—
eset_s.r.o	eset_server_security_for_windows_server	<= 11.0.12011.0	—
eset_s.r.o	eset_smart_security_premium	<= 17.1.13.0	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-276