PT-2006-7278 · Eset · Eset Nod32 Antivirus

Sergio Alvarez · Publicado 2006-12-21 · Atualizado 2018-10-17 · CVE-2006-6676

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: ESET NOD32 Antivirus versions prior to 1.1743

Description: The issue is related to integer overflow in the OLE2 and CHM parsers, which can be exploited by remote attackers to execute arbitrary code. This can be achieved through crafted .DOC or .CAB files that trigger a heap-based buffer overflow.

Recommendations: For versions prior to 1.1743, update to version 1.1743 or later to resolve the issue. As a temporary workaround, consider restricting access to files from untrusted sources to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2006-6676

Produtos afetados

Eset Nod32 Antivirus

Referências · 8

• http://eset.com/support/updates.php?pageno=63 · Correção
• http://secunia.com/advisories/23459 · Aviso do Fabricante
• http://securityfocus.com/bid/21682 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2006-6676 · Nota de Segurança
• http://vupen.com/english/advisories/2006/5095 · Aviso do Fabricante
• http://securityfocus.com/archive/1/455045/100/0/threaded · Nota
• http://securityfocus.com/archive/1/454949/100/0/threaded · Nota
• http://securityreason.com/securityalert/2079 · Nota