Description
Race condition in ESET NOD32 Antivirus before 2.2289 allows remote attackers to execute arbitrary code via a crafted CAB file, which triggers heap corruption.
References
- 20070720 2007-07-20 - n.runs-SA-2007.016 - NOD32 Antivirus CAB parsing Arbitrary Code Execution Advisory mailing-list
- 2922 third-party-advisory
- 26124 third-party-advisory
- http://www.nruns.com/%5Bn.runs-SA-2007.016%5D%20-%20NOD32%20Antivirus%20CAB%20parsing%20Arbitrary%20Code%20Execution%20Advisory.txt
- http://www.eset.com/joomla/index.php?option=com_content&task=view&id=3469&Itemid=26
- 24988 vdb-entry
- 37976 vdb-entry
- http://www.nruns.com/%5Bn.runs-SA-2007.016%5D%20-%20NOD32%20Antivirus%20CAB%20parsing%20Arbitrary%20Code%20Execution%20Advisory.pdf
- nod32-cab-code-execution(35526) vdb-entry
- ADV-2007-2602 vdb-entry