Description
Integer overflow in the (a) OLE2 and (b) CHM parsers for ESET NOD32 Antivirus before 1.1743 allows remote attackers to execute arbitrary code via a crafted (1) .DOC or (2) .CAB file that triggers a heap-based buffer overflow.
References
- 20061221 NOD32 Antivirus CAB parsing Arbitrary Code Execution Advisory mailing-list
- 20061220 NOD32 Antivirus DOC parsing Arbitrary Code Execution Advisory mailing-list
- ADV-2006-5095 vdb-entry
- 2079 third-party-advisory
- http://eset.com/support/updates.php?pageno=63
- 23459 third-party-advisory
- 21682 vdb-entry