CVE-2007-3971 | Vulnerability Database | Aqua Security

Integer overflow in ESET NOD32 Antivirus before 2.2289 allows remote attackers to cause a denial of service (CPU and disk consumption) via a crafted ASPACK packed file, which triggers an infinite loop.

Affected Software

Name	Vendor	Start Version	End Version
Nod32_antivirus	Eset_software	*	2.2289 (including)

References

http://osvdb.org/37977
http://secunia.com/advisories/26124
http://securityreason.com/securityalert/2923
http://www.eset.com/joomla/index.php?option=com_content\u0026task=view\u0026id=3469\u0026Itemid=26
http://www.nruns.com/%5Bn.runs-SA-2007.017%5D%20-%20NOD32%20Antivirus%20ASPACK%20parsing%20Infinite%20Loop%20Advisory.pdf
http://www.nruns.com/%5Bn.runs-SA-2007.017%5D%20-%20NOD32%20Antivirus%20ASPACK%20parsing%20Infinite%20Loop%20Advisory.txt
http://www.securityfocus.com/archive/1/474245/100/0/threaded
http://www.securityfocus.com/bid/24988
http://www.securitytracker.com/id?1018436
http://www.vupen.com/english/advisories/2007/2602
https://exchange.xforce.ibmcloud.com/vulnerabilities/35525

NVD	https://nvd.nist.gov/vuln/detail/CVE-2007-3971
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html