ESET Products TOCTOU Race Condition Vulnerability Allowing Arbitrary File Content Deletion

A time-of-check to time-of-use race condition vulnerability has been identified in multiple ESET security products for Windows. This vulnerability could potentially allow an attacker to use the ESET software to delete the contents of an arbitrary file on the file system. The issue arises from the way the NTFS file system handles file names, enabling the swapping of file handles just before a file is cleared, thereby exploiting the vulnerability.

Impact

Exploitation of this vulnerability could lead to unintended data loss by allowing the deletion of file contents on the affected system.

Remediation

ESET has released fixed builds for all affected products. Users are advised to upgrade to the latest version. The updated versions are available on the ESET website or through the ESET Repository.