Unscored severity · published Jul 25, 2007
CVE-2007-3970
Race condition in ESET NOD32 Antivirus before 2.2289 allows remote attackers to execute arbitrary code via a crafted CAB file, which triggers heap corruption
–
CVSS
5.6%
EPSS
No
On KEV
Description
Race condition in ESET NOD32 Antivirus before 2.2289 allows remote attackers to execute arbitrary code via a crafted CAB file, which triggers heap corruption.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.6% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NA
Nod32 Antivirus · Eset
before 2.2289 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3970
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3970
Broken Link
http://osvdb.org/37976
Broken Link
http://secunia.com/advisories/26124
Third Party Advisory
http://securityreason.com/securityalert/2922
Broken Link
http://www.eset.com/joomla/index.php?option=com_content&task=view&id=3469&Itemid=26
Broken Link
http://www.nruns.com/%5Bn.runs-SA-2007.016%5D%20-%20NOD32%20Antivirus%20CAB%20parsing%20Arbitrary%20Code%20Execution%20Advisory.pdf
Broken Link
http://www.nruns.com/%5Bn.runs-SA-2007.016%5D%20-%20NOD32%20Antivirus%20CAB%20parsing%20Arbitrary%20Code%20Execution%20Advisory.txt
More from Nod32 Antivirus
9.8
CVE-2020-10180
The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive
8.6
CVE-2023-5594
Improper following of a certificate's chain of trust in ESET security products
7.8
CVE-2024-0353
Local privilege escalation in Windows products
7.8
CVE-2021-37851
Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair feature of the installer to run malicious code with higher…
7.8
CVE-2021-37852
ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT…