NOD32 Anti-Virus ARJ Archive Handling Buffer Overflow (CVE-2005-2903)

The Eset NOD32 anti-virus AV product line has the ability to decompress files in numerous archive formats for virus scanning. One such supported archive format is the ARJ format. A buffer overflow vulnerability has been reported in Eset's NOD32 Anti-Virus products. The flaw is triggered when...

ESET Nod32 Romania Hacked !

Today guy from InSecurity.Ro named sway1990 found again a critical vulnerability MySQL Injection in their website. Some extracted informations: Version – 5.1.41-3ubuntu12.10 Main DB – c1eset HostName – web.axelsoft.ro User – c1eset@localhost DataBases: informationschema c1eset Tables of main db:...

ESET Smart Security / NOD32 Antivirus LZH Processing Denial of Service

No description provided by source. Oleksiuk Dmitry has discovered a vulnerability in ESET Smart Security and ESET NOD32 Antivirus, which can be exploited by malicious people to cause a DoS Denial of Service. The vulnerability is caused due to an error when processing LZH archives. This can be...

ESET Smart Security / Nod32 memory corruption

Memory corruption on LZH archives scanning...

ESET Smart Security 4.2 / NOD32 Antivirus 4.2 (x32-x64) LZH parsing PoC

Exploit for windows platform in category dos / poc ======================================================================= ESET Smart Security 4.2 / NOD32 Antivirus 4.2 x32-x64 LZH parsing PoC ======================================================================= ESET Smart Security 4.2 and NOD3...

ESET Smart Security LZH archive parsing vulnerability

Software: ESET Smart Security 4.2 and NOD32 Antivirus 4.2 x32-x64 Vendor status: notified/ignored Tested on: Windows XP, Vista, 7 x32 and x64 Description: Scanning of malicious file causes heap corruption in context of the service process ekrn.exe. See Dr. Watson log drwtsn32.log for details. PoC...

ESET Smart Security 4.2 and NOD32 AntiVirus 4.2 (x86x64) - LZH archive parsing (PoC)

ESET Smart Security 4.2 and NOD32 AntiVirus 4.2 x86x64 - LZH archive parsing PoC ESET Smart Security 4.2 and NOD32 Antivirus 4.2 x32-x64 LZH archive parsing PoC exploit. Scanning of malicious file causes heap corruption in context of the service process ekrn.exe. See Dr. Watson log drwtsn32.log f...

ESET Smart Security 4.2 and NOD32 AntiVirus 4.2 (x86/x64) - LZH archive parsing (PoC)

ESET Smart Security 4.2 and NOD32 Antivirus 4.2 x32-x64 LZH archive parsing PoC exploit. Scanning of malicious file causes heap corruption in context of the service process ekrn.exe. See Dr. Watson log drwtsn32.log for details. USAGE: python esetlzh.py TEST.LZH will be created c 2010 eSage Lab...

NOD32 Cross Site Scripting

. http://www.nod32.com.cn | /\ \ \ \ / \ / \ / | // | / / \ \ | | \ || //\ | / /\ \ / \ | / / / / / / / / Cross Site Scripting Exploit Author: Sora Contact: vhr95zw at hotmail dot com Website: http://greyhathackers.wordpress.com Vulnerability: Cross Site Scripting ————————- 1. INFORMATION...

fckeditor vulnerability,through the kill PHPMPS-vulnerability warning-the black bar safety net

Reproduced retain: evil decimal URL plus /include\fckeditor\editor\filemanager\connectors\test.html connectors select php. Upload the English name of the php or asp the horse was a shell, it is simple. Upload the horse is generally not renamed, the case of the eponymous horse, then change to the...

NOD32 3.0/ESET Smart Security < 3.0.684 Local Privilege Escalation

NOD32 3.0/ESET Smart Security is installed on the remote host. The installed version is older than 3.0.684. Such versions are reportedly affected by a local privilege escalation issue. By sending a specially crafted request to an IOCTL request handler in 'epfw.sys', a local user may be able to...

NOD32 Email Message Denial of Service Vulnerability

This host is installed with NOD32 Antivirus and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbnod32emailmessagedos.nasl 5370 2017-02-20 15:24:26Z cfi $ NOD32 E-mail message Denial of Service Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 2008 Greenbone...

NOD32 Email Message Denial of Service Vulnerability

NOD32 Antivirus is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-5534

ESET NOD32 Antivirus 3662 and possibly 3440, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jp...

Design/Logic Flaw

ESET NOD32 Antivirus 3662 and possibly 3440, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jp...

CVE-2008-5534

CVE-2008-5534 is a vulnerability in certain antivirus products (e.g., ESET NOD32 3662/3440) where an HTML document can bypass malware detection when opened in IE6/IE7 by prefixing the file with an MZ header (EXE info) and altering the filename to have no extension or a .txt or .jpg extension, as ...

CVE-2008-5534

ESET NOD32 Antivirus 3662 and possibly 3440, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jp...

CVE-2008-5534: Improper Input Validation

ESET NOD32 Antivirus 3662 and possibly 3440, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jp...

Design/Logic Flaw

ESet NOD32 2.70.0039.0000 does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service stack consumption or other resource consumption vi...

CVE-2008-5425

ESet NOD32 2.70.0039.0000 does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service stack consumption or other resource consumption vi...