PT-2007-4156 · Eset · Eset Nod32 Antivirus

Publicado 2007-05-24 · Atualizado 2018-10-16 · CVE-2007-2852

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ESET NOD32 Antivirus versions prior to 2.70.37.0

Description The issue is related to multiple stack-based buffer overflows that can be triggered during specific operations, such as delete/disinfect or rename, by using a crafted directory name. This can allow remote attackers to execute arbitrary code.

Recommendations For versions prior to 2.70.37.0, update to version 2.70.37.0 or later to resolve the issue. As a temporary workaround, consider restricting directory name inputs to prevent the use of crafted names until a patch is applied.

Correção

Identificadores relacionados

CVE-2007-2852

Produtos afetados

Eset Nod32 Antivirus

Referências · 14

• http://securityreason.com/securityalert/2733 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34454 · Nota
• http://securityfocus.com/archive/1/469300/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2852 · Nota de Segurança
• http://osvdb.org/36650 · Nota
• http://securityfocus.com/archive/1/469337/100/0/threaded · Nota
• http://securityfocus.com/archive/1/archive/1/469300/100/0/threaded · Nota
• http://securityfocus.com/archive/1/469468/100/0/threaded · Nota
• http://eset.com/support/news.php · Nota
• http://inkatel.com/wp-content/uploads/2007/05/Advisory.txt · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/1911 · Nota
• http://frsirt.com/english/advisories/2007/1911 · Nota
• http://securityfocus.com/bid/24098 · Nota
• http://secunia.com/advisories/25375 · Aviso do Fabricante