2 ms·
The blog post links to previous analysis of vulnerabilities in Sophos and ESET products. "Many of the vulnerabilities described in this paper could ha
by ploxiln 11y ago
The blog post links to previous analysis of vulnerabilities in Sophos and ESET products.
"Many of the vulnerabilities described in this paper could have been severely limited by correct security design, employing modern isolation and exploit mitigation techniques. However, Sophos either disables or opts-out of most major mitigation technologies, even disabling them for other software on the host system."
"Unfortunately, analysis of ESET emulation reveals that is not the case and it can be trivially compromised. This report discusses the development of a remote root exploit for an ESET vulnerability and demonstrates how attackers could compromise ESET users."
So, yes, definitely.