CVE-2007-3971 Integer overflow in ESET NOD32 Antivirus before 2.2289 allows remote attackers to cause a denial of service (CPU and disk consumption) via a crafted ASPACK packed file, which triggers an infinite loop...
MediumCVSS 5.0
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in ESET NOD32 Antivirus before 2.2289 allows remote attackers to cause a denial of service (CPU and disk consumption) via a crafted ASPACK packed file, which triggers an infinite loop.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| eset software nod32 antivirus | <= 2.2289 | No fix listed |
References
- 37977 vdb-entry
- 26124 patch third-party-advisory vendor-advisory
- 2923 third-party-advisory
- www.eset.com patch
- www.nruns.com
- www.nruns.com
- 20070720 2007-07-20 - n.runs-SA-2007.017 - NOD32 Antivirus ASPACK parsing Infinite Loop Advisory mailing-list
- 24988 exploit vdb-entry
- 1018436 vdb-entry
- ADV-2007-2602 vdb-entry
- nod32-aspack-dos(35525) vdb-entry