327 matches found
CVE-2025-1364 MicroWord eScan Antivirus USB Protection Service passPrompt stack-based overflow
A vulnerability has been found in MicroWord eScan Antivirus 7.0.32 on Linux and classified as critical. Affected by this vulnerability is the function passPrompt of the component USB Protection Service. The manipulation leads to stack-based buffer overflow. It is possible to launch the attack on...
CVE-2025-1364 MicroWord eScan Antivirus USB Protection Service passPrompt stack-based overflow
A vulnerability has been found in MicroWord eScan Antivirus 7.0.32 on Linux and classified as critical. Affected by this vulnerability is the function passPrompt of the component USB Protection Service. The manipulation leads to stack-based buffer overflow. It is possible to launch the attack on...
CVE-2025-1364
CVE-2025-1364 details a stack-based buffer overflow in the USB Protection Service's passPrompt function in MicroWord eScan Antivirus 7.0.32 on Linux. The flaw allows a local attacker to trigger exploitation on the host; the exploit has been publicly disclosed and vendor response is unavailable. A...
PT-2025-6900 · Microworld · Microword Escan Antivirus
Name of the Vulnerable Software and Affected Versions: MicroWorld eScan Antivirus version 7.0.32 Description: A critical issue has been found in MicroWorld eScan Antivirus, affecting the sprintf function of the epsdaemon file in the Autoscan USB component. This leads to os command injection. The...
PT-2025-6898 · Microworld · Microword Escan Antivirus
Name of the Vulnerable Software and Affected Versions: MicroWord eScan Antivirus version 7.0.32 Description: A vulnerability was found in MicroWord eScan Antivirus on Linux, affecting the function ReadConfiguration of the file /opt/MicroWorld/etc/mwav.conf. The manipulation of the argument BasePa...
PT-2025-6896 · Microworld · Microword Escan Antivirus
Name of the Vulnerable Software and Affected Versions: MicroWord eScan Antivirus version 7.0.32 Description: A critical issue has been found in the strcpy function of the VirusPopUp component, leading to a stack-based buffer overflow. The attack must be approached locally. The exploit has been...
PT-2025-6897 · Microworld · Microword Escan Antivirus
Name of the Vulnerable Software and Affected Versions: MicroWord eScan Antivirus version 7.0.32 Description: A critical issue has been discovered affecting the sprintf function of the USB Password Handler component. This issue leads to a buffer overflow. The attack must be approached locally,...
PT-2025-6894 · Microworld · Microword Escan Antivirus
Name of the Vulnerable Software and Affected Versions: MicroWord eScan Antivirus version 7.0.32 Description: A critical issue has been discovered in the passPrompt function of the USB Protection Service component. This issue leads to a stack-based buffer overflow. The attack can be launched on th...
eScan Antivirus 安全漏洞
eScan Antivirus is a network anti-virus security software from eScan. A security vulnerability exists in eScan Antivirus version 7.0.32, which originates from a stack buffer overflow in the function passPrompt of the component USB Protection Service...
CVE-2021-26624
An local privilege escalation vulnerability due to a "runasroot" command in eScan Anti-Virus. This vulnerability is due to invalid arguments and insufficient execution conditions related to "runasroot" command. This vulnerability can induce remote attackers to exploit root privileges by...
CVE-2025-0798
A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been rated as critical. This issue affects some unknown processing of the file rtscanner of the component Quarantine Handler. The manipulation leads to os command injection. The attack may be initiated remotely. The...
CVE-2025-0798
A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been rated as critical. This issue affects some unknown processing of the file rtscanner of the component Quarantine Handler. The manipulation leads to os command injection. The attack may be initiated remotely. The...
CVE-2025-0797
A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been declared as problematic. This vulnerability affects unknown code of the file /var/Microworld/ of the component Quarantine Handler. The manipulation leads to incorrect default permissions. The attack needs to be...
CVE-2025-0798
A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been rated as critical. This issue affects some unknown processing of the file rtscanner of the component Quarantine Handler. The manipulation leads to os command injection. The attack may be initiated remotely. The...
CVE-2025-0797
A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been declared as problematic. This vulnerability affects unknown code of the file /var/Microworld/ of the component Quarantine Handler. The manipulation leads to incorrect default permissions. The attack needs to be...
CVE-2025-0798 MicroWorld eScan Antivirus Quarantine rtscanner os command injection
A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been rated as critical. This issue affects some unknown processing of the file rtscanner of the component Quarantine Handler. The manipulation leads to os command injection. The attack may be initiated remotely. The...
CVE-2025-0798
Summary: CVE-2025-0798 affects MicroWorld eScan Antivirus 7.0.32 on Linux, targeting the Quarantine Handler’s |rtscanner| file. The underlying issue is an operating system command injection that can be triggered remotely. The attack is described as high complexity and previously disclosed. Affect...
CVE-2025-0797
CVE-2025-0797 affects MicroWorld eScan Antivirus 7.0.32 on Linux, specifically the Quarantine Handler component and the /var/Microworld/ path. The root cause is incorrect default permissions on that file/directory, enabling a local attacker to exploit the weakness. The exploit has been disclosed ...
CVE-2025-0797 MicroWorld eScan Antivirus Quarantine Microworld default permission
A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been declared as problematic. This vulnerability affects unknown code of the file /var/Microworld/ of the component Quarantine Handler. The manipulation leads to incorrect default permissions. The attack needs to be...
MicroWorld eScan Anti-Virus 命令注入漏洞
MicroWorld eScan Anti-Virus is an Internet security solution from MicroWorld, Inc. It provides virus protection for enterprise and home SOHO users. A command injection vulnerability exists in MicroWorld eScan Anti-Virus version 7.0.32, which originates from an operating system command injection i...