• info
• discussion
• exploit
• solution
• references

ESET Smart Security 'easdrv.sys' Local Privilege Escalation Vulnerability

ESET Smart Security is prone to a local privilege-escalation vulnerability that occurs in the 'easdrv.sys' driver.

An attacker can exploit this issue to execute arbitrary code with kernel-level privileges on a Microsoft Windows host operating system. Successfully exploiting this issue will result in the complete compromise of affected computers. Failed exploit attempts will result in a denial-of-service condition.

ESET Smart Security 3.0.667.0 is vulnerable; other versions may also be affected.