CVE-2007-3971

Integer overflow in ESET NOD32 Antivirus before 2.2289 allows remote attackers to cause a denial of service CPU and disk consumption via a crafted ASPACK packed file, which triggers an infinite loop...

CVE-2007-3972

ESET NOD32 Antivirus before 2.2289 allows remote attackers to cause a denial of service via a crafted 1 ASPACK or 2 FSG packed file, which triggers a divide-by-zero error...

CVE-2007-3970

Race condition in ESET NOD32 Antivirus before 2.2289 allows remote attackers to execute arbitrary code via a crafted CAB file, which triggers heap corruption...

CVE-2007-3972

ESET NOD32 Antivirus before 2.2289 allows remote attackers to cause a denial of service via a crafted 1 ASPACK or 2 FSG packed file, which triggers a divide-by-zero error...

CVE-2007-3970

Race condition in ESET NOD32 Antivirus before 2.2289 allows remote attackers to execute arbitrary code via a crafted CAB file, which triggers heap corruption...

CVE-2007-3970

CVE-2007-3970 concerns ESET NOD32 Antivirus prior to 2.2289. A race condition triggered by a crafted CAB file can cause heap corruption, enabling remote code execution as described in the NVD entry. Affected software: ESET NOD32 Antivirus; vulnerability type: race condition in CAB file handling. ...

CVE-2007-3971

CVE-2007-3971 affects ESET NOD32 Antivirus before 2.2289. The vulnerability is an integer overflow in the ASPACK packed file parser that can trigger an infinite loop, enabling remote attackers to cause CPU and disk consumption (DoS). The provided documents do not specify a remediation or patch ve...

CVE-2007-3972

Summary: CVE-2007-3972 affects ESET NOD32 Antivirus prior to 2.2289. A remote attacker can trigger a denial-of-service by presenting a crafted ASPACK or FSG-packed file, which leads to a divide-by-zero error inside the run-time decompressor. Affected product: NOD32 Antivirus (before 2.2289).Root ...

CVE-2007-3971

Integer overflow in ESET NOD32 Antivirus before 2.2289 allows remote attackers to cause a denial of service CPU and disk consumption via a crafted ASPACK packed file, which triggers an infinite loop...

PT-2007-5190 · Eset · Eset Nod32 Antivirus

Name of the Vulnerable Software and Affected Versions: ESET NOD32 Antivirus versions prior to 2.2289 Description: A race condition in the software allows remote attackers to execute arbitrary code via a crafted CAB file, which triggers heap corruption. This issue can be exploited to gain...

KLA10268 Multiple vulnerabilities in ESET NOD32

Multiple serious vulnerabilities have been found in ESET NOD32. Malicious users can exploit these vulnerabilities to cause denial of service or execute arbitrary code. Below is a complete list of vulnerabilities 1. Division by zero can be exploited remotely via a specially designed packet 2. An...

ESET NOD32 Antivirus多个远程拒绝服务及堆溢出漏洞

BUGTRAQ ID: 24988 NOD32 Anti-Virus是美国ESET公司开发的杀毒软件。 NOD32的文件解析引擎在解析ASPACK压缩文件时可能会触发整数溢出，导致死循环，消耗大量CPU和存储资源；在解析ASPACK和FSG压缩的文件时可能将0用作除数，导致拒绝服务；在解析.CAB文件时竞争条件可能会触发堆溢出，导致在用户系统上执行任意指令。 Eset NOD32 2.2289 厂商补丁： Eset ---- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.nod32.com/...

2007-07-20 - n.runs-SA-2007.016 - NOD32 Antivirus CAB parsing Arbitrary Code Execution Advisory

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2007.016 20-Jul-2007 Vendor: ESET, http://eset.com Affected Products: ESET NOD32 Antivirus Vulnerability: Arbitrary Code Execution remote Risk: HIGH Vendor communication: 2007/05/07 Initial notification to ESET 2007/05/07 ESET Response...

202007-07-20 - n.runs-SA-2007.018 - NOD32 Antivirus ASPACK and FSG parsing Divide by Zero Advisory

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2007.018 20-Jul-2007 Vendor: ESET, http://eset.com Affected Products: ESET NOD32 Antivirus Vulnerability: Denial of Service remote Risk: MODERATE Vendor communication: 2007/05/07 Initial notification to ESET 2007/05/07 ESET Response...

2007-07-20 - n.runs-SA-2007.017 - NOD32 Antivirus ASPACK parsing Infinite Loop Advisory

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2007.017 20-Jul-2007 Vendor: ESET, http://eset.com Affected Products: ESET NOD32 Antivirus Vulnerability: Denial of Service remote Risk: MODERATE Vendor communication: 2007/05/07 Initial notification to ESET 2007/05/07 ESET Response...

NOD32 control center is password forgotten solution-vulnerability warning-the black bar safety net

DRL Zeroliz Many of my friends have used NOD32, this excellent anti-virus software, however, if the Control Center have set a password, but rather and the password is forgotten? Look here. Delete the registry a little content on it. HKEYLOCALMACHINE\SOFTWARE\Eset\Nod\CurrentVersion\Info "PackageI...

Stack overflow

Multiple stack-based buffer overflows in ESET NOD32 Antivirus before 2.70.37.0 allow remote attackers to execute arbitrary code during 1 delete/disinfect or 2 rename operations via a crafted directory name...

CVE-2007-2852

Multiple stack-based buffer overflows in ESET NOD32 Antivirus before 2.70.37.0 allow remote attackers to execute arbitrary code during 1 delete/disinfect or 2 rename operations via a crafted directory name...

CVE-2007-2852

Multiple stack-based buffer overflows in ESET NOD32 Antivirus before 2.70.37.0 allow remote attackers to execute arbitrary code during 1 delete/disinfect or 2 rename operations via a crafted directory name...

CVE-2007-2852

CVE-2007-2852 affects ESET NOD32 Antivirus prior to 2.70.37.0. It describes two stack-based buffer overflows triggered during delete/disinfect or rename operations via a crafted directory name, enabling remote code execution. A fix is available in version 2.70.37.0; upgrading to that version or a...