CVE-2007-3970
eset nod32 antivirus: no CVSS score yet. EPSS 5.6% chance of exploitation in the next 30 days.
Race condition in ESET NOD32 Antivirus before 2.2289 allows remote attackers to execute arbitrary code via a crafted CAB file, which triggers heap corruption.
- EPSS
- 5.6% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
- CWE
- CWE-362
- Published
- Modified
- Record from
- the NVD, synced
Affected
- eset:nod32_antivirus
References
- http://osvdb.org/37976
- http://secunia.com/advisories/26124
- http://securityreason.com/securityalert/2922
- http://www.eset.com/joomla/index.php?option=com_content&task=view&id=3469&Itemid=26
- http://www.nruns.com/%5Bn.runs-SA-2007.016%5D%20-%20NOD32%20Antivirus%20CAB%20parsing%20Arbitrary%20Code%20Execution%20Advisory.pdf