Ultimate protection is strengthened by ESET’s cloud-based reputation system called ESET LiveGrid.
Based on artificial intelligence, the advanced technologies that comprise ESET Cyber Security Pro are capable of proactively eliminating infiltration by viruses, worms, trojan horses, spyware, adware,rootkits and other Internet-borne attacks without hindering system performance.ĮSET Cyber Security products focus on effective detection of yet unknown malware by utilizing advanced Heuristics, generic signatures and genetic technology and are engineered with low memory usage and minimal notifications to protect Macs while keeping them running at peak performance. The result is an intelligent system that is constantly on alert defending your computer against attacks and malicious software.ĮSET Cyber Security Pro is a complete security solution produced from our long-term effort to combine maximum protection and a minimal system footprint. The most recent version of the ThreatSense scanning engine, combined with Email client protection, Personal firewall and Parental control, utilizes speed and precision to keep your computer safe. In 2015, Tavis Ormandy discovered a critical flaw in the security firm’s Windows and OS X products that could have been exploited to take complete control of a device.ESET Cyber Security Pro represents a new approach to truly integrated computer security. This was not the first time Google researchers found vulnerabilities in ESET products.
The proof-of-concept (PoC) code released by the Google researchers only shows how the ESET antivirus application can be caused to crash.ĮSET addressed the vulnerability by upgrading the POCO parsing library and by configuring the product to verify SSL certificates. CVE-2016-0718 would get triggered and the malicious code executed with root privileges when esets_daemon parsed the XML content. An attack was possible due to the fact that the antivirus failed to validate the web server’s certificate.Īn attacker could have intercepted the request to deliver a malicious XML document using a self-signed HTTPS certificate. The vulnerable version of POCO, 1.4.6p1, released in 2013, is based on a version of the Expat XML parser library affected by CVE-2016-0718, a flaw that allows an attacker to execute arbitrary code via specially crafted XML content.Ī man-in-the-middle (MitM) attacker could have exploited the vulnerability when the esets_daemon service sent a request to during activation of the ESET Endpoint Antivirus product. The service is statically linked with an old version of the POCO XML parsing library.
The problem, according to the experts, was related to a service named esets_daemon that runs as root. ESET Cyber Security Pro maintains high computer performance and extends the.
The flaw affects ESET Endpoint Antivirus 6 for macOS and it has been patched on February 21 with the release of version 6.4.168.0. Protect your Mac against malware, as well as Windows- and Linux-targeted. The security hole, tracked as CVE-2016-9892, was identified in early November 2016 by Jason Geffner and Jan Bee of the Google Security Team.
ESET has released an update that addresses the vulnerability.
Google researchers discovered a critical flaw in ESET Endpoint Antivirus for macOS that could have been exploited by an unauthenticated attacker to remotely execute arbitrary code with root privileges.