PT-2006-7278 · Eset · Eset Nod32 Antivirus

Sergio Alvarez · Published 2006-12-21 · Updated 2018-10-17 · CVE-2006-6676

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: ESET NOD32 Antivirus versions prior to 1.1743

Description: The issue is related to integer overflow in the OLE2 and CHM parsers, which can be exploited by remote attackers to execute arbitrary code. This can be achieved through crafted .DOC or .CAB files that trigger a heap-based buffer overflow.

Recommendations: For versions prior to 1.1743, update to version 1.1743 or later to resolve the issue. As a temporary workaround, consider restricting access to files from untrusted sources to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2006-6676

Affected Products

Eset Nod32 Antivirus

References · 8

• http://eset.com/support/updates.php?pageno=63 · Patch
• http://secunia.com/advisories/23459 · Vendor Advisory
• http://securityfocus.com/bid/21682 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-6676 · Security Note
• http://vupen.com/english/advisories/2006/5095 · Vendor Advisory
• http://securityfocus.com/archive/1/455045/100/0/threaded · Note
• http://securityfocus.com/archive/1/454949/100/0/threaded · Note
• http://securityreason.com/securityalert/2079 · Note