CVE-2007-2852 Multiple stack-based buffer overflows in ESET NOD32 Antivirus before 2.70.37.0 allow remote attackers to execute arbitrary code during (1) delete/disinfect or (2) rename operations via a crafted direc...
HighCVSS 9.3
EPSS 6.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based buffer overflows in ESET NOD32 Antivirus before 2.70.37.0 allow remote attackers to execute arbitrary code during (1) delete/disinfect or (2) rename operations via a crafted directory name.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| eset software nod32 antivirus | = 2.70.37.0 | No fix listed |
References
- 36650 vdb-entry
- 25375 patch third-party-advisory vendor-advisory
- 2733 third-party-advisory
- www.eset.com
- www.inkatel.com vendor-advisory
- 20070521 NOD32 Antivirus Long Path Name Stack Overflow Vulnerabilities mailing-list
- 20070523 Re: NOD32 Antivirus Long Path Name Stack Overflow Vulnerabilities mailing-list
- 20070524 Re: NOD32 Antivirus Long Path Name Stack Overflow Vulnerabilities mailing-list
- 24098 vdb-entry
- ADV-2007-1911 vdb-entry
- nod32-directoryname-bo(34454) vdb-entry