Description
Multiple stack-based buffer overflows in ESET NOD32 Antivirus before 2.70.37.0 allow remote attackers to execute arbitrary code during (1) delete/disinfect or (2) rename operations via a crafted directory name.
References
- http://www.inkatel.com/wp-content/uploads/2007/05/Advisory.txt
- 36650 vdb-entry
- 20070521 NOD32 Antivirus Long Path Name Stack Overflow Vulnerabilities mailing-list
- 24098 vdb-entry
- 25375 third-party-advisory
- 20070523 Re: NOD32 Antivirus Long Path Name Stack Overflow Vulnerabilities mailing-list
- nod32-directoryname-bo(34454) vdb-entry
- http://www.eset.com/support/news.php
- ADV-2007-1911 vdb-entry
- 2733 third-party-advisory
- 20070524 Re: NOD32 Antivirus Long Path Name Stack Overflow Vulnerabilities mailing-list