ESET Windows Products Registry Modification Vulnerability Leading to Denial-of-Service

A vulnerability exists in various ESET security products for Windows, allowing unauthorized modifications to the products' registry entries. This flaw could disrupt the normal startup of the ESET applications after a system reboot or cause unauthorized changes to the products' configurations. The issue stems from a lack of proper protection for registry entries against alterations by certain Windows APIs.

Impact

Exploitation of this vulnerability could prevent ESET security products from launching correctly after a system restart or lead to unauthorized changes in the products' settings.

Remediation

ESET has released a patch for this vulnerability in the HIPS support module 1496, which was distributed automatically to users. For new installations, it is recommended to download the latest installer from the ESET website or through the ESET repository.