CVE-2007-3970 - Secunia.com

CVE Reference: CVE-2007-3970
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-3970

Description: Race condition in ESET NOD32 Antivirus before 2.2289 allows remote attackers to execute arbitrary code via a crafted CAB file, which triggers heap corruption.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/35526 SREASON http://securityreason.com/securityalert/2922 SAID Secunia Advisory: SA26124 OSVDB 37976 MISC http://www.nruns.com/[n.runs-SA-2007.016]%20-%20NOD32%20Antivirus%20CAB%20parsing%20Arbitrary%20Code%20Execution%20Advisory.txt http://www.nruns.com/[n.runs-SA-2007.016]%20-%20NOD32%20Antivirus%20CAB%20parsing%20Arbitrary%20Code%20Execution%20Advisory.pdf CONFIRM http://www.eset.com/joomla/index.php?option=com_content&task=view&id=3469&Itemid=26 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/474244/100/0/threaded BID 24988

Return to the previous page.

Secunia