PT-2007-4156 · Eset · Eset Nod32 Antivirus

Published 2007-05-24 · Updated 2018-10-16 · CVE-2007-2852

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ESET NOD32 Antivirus versions prior to 2.70.37.0

Description The issue is related to multiple stack-based buffer overflows that can be triggered during specific operations, such as delete/disinfect or rename, by using a crafted directory name. This can allow remote attackers to execute arbitrary code.

Recommendations For versions prior to 2.70.37.0, update to version 2.70.37.0 or later to resolve the issue. As a temporary workaround, consider restricting directory name inputs to prevent the use of crafted names until a patch is applied.

Fix

Related Identifiers

CVE-2007-2852

Affected Products

Eset Nod32 Antivirus

References · 14

• https://nvd.nist.gov/vuln/detail/CVE-2007-2852 · Security Note
• http://inkatel.com/wp-content/uploads/2007/05/Advisory.txt · Vendor Advisory
• http://secunia.com/advisories/25375 · Vendor Advisory
• http://securityreason.com/securityalert/2733 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34454 · Note
• http://securityfocus.com/archive/1/469300/100/0/threaded · Note
• http://osvdb.org/36650 · Note
• http://securityfocus.com/archive/1/469337/100/0/threaded · Note
• http://securityfocus.com/archive/1/archive/1/469300/100/0/threaded · Note
• http://securityfocus.com/archive/1/469468/100/0/threaded · Note
• http://eset.com/support/news.php · Note
• http://vupen.com/english/advisories/2007/1911 · Note
• http://frsirt.com/english/advisories/2007/1911 · Note
• http://securityfocus.com/bid/24098 · Note