ESET Smart Security 3.0.667.0 - Privilege Escalation (PoC)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - Orange Bat advisory - Name : ESET Smart Security 3.0.667.0 Class : Privilage escalation Published : 2008-08-14 Credit : g g orange-bat com - - Details - File: easdrv.sys .text:00012B92 loc12B92: .text:00012B92 push ebp+InputBuf .text:00012B95 call...

Multiple AntiVirus (zip file) Detection Bypass Exploit

No description provided by source. / zipbrk.c - Proof-of-Concept for CAN-2004-0932 - CAN-2004-0937 Copyright C 2004 oc.192 This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either...

Integer overflow

Integer overflow in ESET NOD32 Antivirus before 2.2289 allows remote attackers to cause a denial of service CPU and disk consumption via a crafted ASPACK packed file, which triggers an infinite loop...

Race condition

Race condition in ESET NOD32 Antivirus before 2.2289 allows remote attackers to execute arbitrary code via a crafted CAB file, which triggers heap corruption...

CVE-2007-3970

Race condition in ESET NOD32 Antivirus before 2.2289 allows remote attackers to execute arbitrary code via a crafted CAB file, which triggers heap corruption...

CVE-2007-3972

ESET NOD32 Antivirus before 2.2289 allows remote attackers to cause a denial of service via a crafted 1 ASPACK or 2 FSG packed file, which triggers a divide-by-zero error...

CVE-2007-3971

Integer overflow in ESET NOD32 Antivirus before 2.2289 allows remote attackers to cause a denial of service CPU and disk consumption via a crafted ASPACK packed file, which triggers an infinite loop...

CVE-2007-3971

Integer overflow in ESET NOD32 Antivirus before 2.2289 allows remote attackers to cause a denial of service CPU and disk consumption via a crafted ASPACK packed file, which triggers an infinite loop...

CVE-2007-3972

ESET NOD32 Antivirus before 2.2289 allows remote attackers to cause a denial of service via a crafted 1 ASPACK or 2 FSG packed file, which triggers a divide-by-zero error...

CVE-2007-3970

CVE-2007-3970 concerns ESET NOD32 Antivirus prior to 2.2289. A race condition triggered by a crafted CAB file can cause heap corruption, enabling remote code execution as described in the NVD entry. Affected software: ESET NOD32 Antivirus; vulnerability type: race condition in CAB file handling. ...

CVE-2007-3971

CVE-2007-3971 affects ESET NOD32 Antivirus before 2.2289. The vulnerability is an integer overflow in the ASPACK packed file parser that can trigger an infinite loop, enabling remote attackers to cause CPU and disk consumption (DoS). The provided documents do not specify a remediation or patch ve...

CVE-2007-3970

Race condition in ESET NOD32 Antivirus before 2.2289 allows remote attackers to execute arbitrary code via a crafted CAB file, which triggers heap corruption...

CVE-2007-3972

Summary: CVE-2007-3972 affects ESET NOD32 Antivirus prior to 2.2289. A remote attacker can trigger a denial-of-service by presenting a crafted ASPACK or FSG-packed file, which leads to a divide-by-zero error inside the run-time decompressor. Affected product: NOD32 Antivirus (before 2.2289).Root ...

PT-2007-5190 · Eset · Eset Nod32 Antivirus

Name of the Vulnerable Software and Affected Versions: ESET NOD32 Antivirus versions prior to 2.2289 Description: A race condition in the software allows remote attackers to execute arbitrary code via a crafted CAB file, which triggers heap corruption. This issue can be exploited to gain...

KLA10268 Multiple vulnerabilities in ESET NOD32

Multiple serious vulnerabilities have been found in ESET NOD32. Malicious users can exploit these vulnerabilities to cause denial of service or execute arbitrary code. Below is a complete list of vulnerabilities 1. Division by zero can be exploited remotely via a specially designed packet 2. An...

CVE-2007-3970: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in ESET NOD32 Antivirus before 2.2289 allows remote attackers to execute arbitrary code via a crafted CAB file, which triggers heap corruption...

CVE-2007-3971: Undefined Security Weakness

Integer overflow in ESET NOD32 Antivirus before 2.2289 allows remote attackers to cause a denial of service CPU and disk consumption via a crafted ASPACK packed file, which triggers an infinite loop...

CVE-2007-3972: Undefined Security Weakness

ESET NOD32 Antivirus before 2.2289 allows remote attackers to cause a denial of service via a crafted 1 ASPACK or 2 FSG packed file, which triggers a divide-by-zero error...

ESET NOD32 Antivirus多个远程拒绝服务及堆溢出漏洞

BUGTRAQ ID: 24988 NOD32 Anti-Virus是美国ESET公司开发的杀毒软件。 NOD32的文件解析引擎在解析ASPACK压缩文件时可能会触发整数溢出，导致死循环，消耗大量CPU和存储资源；在解析ASPACK和FSG压缩的文件时可能将0用作除数，导致拒绝服务；在解析.CAB文件时竞争条件可能会触发堆溢出，导致在用户系统上执行任意指令。 Eset NOD32 2.2289 厂商补丁： Eset ---- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.nod32.com/...

2007-07-20 - n.runs-SA-2007.017 - NOD32 Antivirus ASPACK parsing Infinite Loop Advisory

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2007.017 20-Jul-2007 Vendor: ESET, http://eset.com Affected Products: ESET NOD32 Antivirus Vulnerability: Denial of Service remote Risk: MODERATE Vendor communication: 2007/05/07 Initial notification to ESET 2007/05/07 ESET Response...