This CPE summary could be partial or incomplete. Please contact us for a detailed listing.

Summary

Detail
Vendor Eset Software First view 2005-10-14
Product nod32 Antivirus Last view 2007-07-25
Version * Type Application
Update *  
Edition *  
Language *  
Sofware Edition *  
Target Software *  
Target Hardware *  
Other *  
 
CPE Product cpe:2.3:a:eset_software:nod32_antivirus

Activity : Overall

Related : CVE

  Date Alert Description
5 2007-07-25 CVE-2007-3972

ESET NOD32 Antivirus before 2.2289 allows remote attackers to cause a denial of service via a crafted (1) ASPACK or (2) FSG packed file, which triggers a divide-by-zero error.

5 2007-07-25 CVE-2007-3971

Integer overflow in ESET NOD32 Antivirus before 2.2289 allows remote attackers to cause a denial of service (CPU and disk consumption) via a crafted ASPACK packed file, which triggers an infinite loop.

5 2007-07-25 CVE-2007-3970

Race condition in ESET NOD32 Antivirus before 2.2289 allows remote attackers to execute arbitrary code via a crafted CAB file, which triggers heap corruption.

2.6 2006-12-20 CVE-2006-6677

ESET NOD32 Antivirus before 1.1743 allows remote attackers to cause a denial of service (crash) via a crafted .CHM file that triggers a divide-by-zero error.

9.3 2006-12-20 CVE-2006-6676

Integer overflow in the (a) OLE2 and (b) CHM parsers for ESET NOD32 Antivirus before 1.1743 allows remote attackers to execute arbitrary code via a crafted (1) .DOC or (2) .CAB file that triggers a heap-based buffer overflow.

5.1 2005-10-14 CVE-2005-3212

Multiple interpretation error in unspecified versions of NOD32 Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.

CWE : Common Weakness Enumeration

%idName
100% (1) CWE-189 Numeric Errors

CAPEC : Common Attack Pattern Enumeration & Classification

id Name
CAPEC-26 Leveraging Race Conditions
CAPEC-29 Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions

Open Source Vulnerability Database (OSVDB)

id Description
37978 NOD32 Antivirus Crafted ASPACK / FSG File handling DoS
37977 NOD32 Antivirus Crafted ASPACK Packed File Handling Overflow
37976 NOD32 Antivirus CAB File Handling Arbitrary Code Execution
32081 NOD32 Antivirus CHM Parser Overflow
32080 NOD32 Antivirus OLE2 Parsing Overflow
32079 NOD32 Antivirus CHM File Handling DoS
19954 Multiple Anti-Virus Engine Crafted Archive Header Virus Detection Bypass

Nessus® Vulnerability Scanner

id Description
2007-07-23 Name: The remote Windows host has an application that is affected by multiple issues.
File: nod32_2289.nasl - Type: ACT_GATHER_INFO
2006-12-20 Name: The remote Windows host has an application that is affected by multiple issues.
File: nod32_11743.nasl - Type: ACT_GATHER_INFO