Integer Overflow Vulnerability in ESET NOD32 Antivirus

CVE-2007-3971

What is CVE-2007-3971?

ESET NOD32 Antivirus prior to version 2.2289 suffers from an integer overflow vulnerability that can be exploited by remote attackers. This flaw occurs when processing specially crafted ASPACK packed files, leading to excessive CPU and disk consumption. An attacker can trigger this vulnerability, causing the application to enter an infinite loop, ultimately resulting in a denial of service. Organizations using affected versions of ESET NOD32 Antivirus are advised to update their systems promptly to mitigate the risk associated with this vulnerability.

References