CVE Vulnerabilities

CVE-2015-8841

Out-of-bounds Write

Published: Apr 12, 2016 | Modified: Apr 12, 2025
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Heap-based buffer overflow in the Archive support module in ESET NOD32 before update 11861 allows remote attackers to execute arbitrary code via a large number of languages in an EPOC installation file of type SIS_FILE_MULTILANG.

Weakness

The product writes data past the end, or before the beginning, of the intended buffer.

Affected Software

NameVendorStart VersionEnd Version
Nod32Eset–10951 (including)–10951 (including)
Nod32Eset–10952 (including)–10952 (including)
Nod32Eset–10953 (including)–10953 (including)
Nod32Eset–10954 (including)–10954 (including)
Nod32Eset–10955 (including)–10955 (including)
Nod32Eset–10956 (including)–10956 (including)
Nod32Eset–10957 (including)–10957 (including)
Nod32Eset–10958 (including)–10958 (including)
Nod32Eset–10959 (including)–10959 (including)
Nod32Eset–10960 (including)–10960 (including)
Nod32Eset–10961 (including)–10961 (including)
Nod32Eset–10962 (including)–10962 (including)
Nod32Eset–10963 (including)–10963 (including)
Nod32Eset–10964 (including)–10964 (including)
Nod32Eset–10965 (including)–10965 (including)
Nod32Eset–10966 (including)–10966 (including)
Nod32Eset–10967 (including)–10967 (including)
Nod32Eset–10968 (including)–10968 (including)
Nod32Eset–10969 (including)–10969 (including)
Nod32Eset–10970 (including)–10970 (including)
Nod32Eset–10971 (including)–10971 (including)
Nod32Eset–10972 (including)–10972 (including)
Nod32Eset–10973 (including)–10973 (including)
Nod32Eset–10974 (including)–10974 (including)
Nod32Eset–10975 (including)–10975 (including)
Nod32Eset–10976 (including)–10976 (including)
Nod32Eset–10977 (including)–10977 (including)
Nod32Eset–10978 (including)–10978 (including)
Nod32Eset–10979 (including)–10979 (including)
Nod32Eset–10980 (including)–10980 (including)
Nod32Eset–10981 (including)–10981 (including)
Nod32Eset–10982 (including)–10982 (including)
Nod32Eset–10983 (including)–10983 (including)
Nod32Eset–10984 (including)–10984 (including)
Nod32Eset–10985 (including)–10985 (including)
Nod32Eset–10986 (including)–10986 (including)
Nod32Eset–10987 (including)–10987 (including)
Nod32Eset–10988 (including)–10988 (including)
Nod32Eset–10989 (including)–10989 (including)
Nod32Eset–10990 (including)–10990 (including)
Nod32Eset–10991 (including)–10991 (including)
Nod32Eset–10992 (including)–10992 (including)
Nod32Eset–10993 (including)–10993 (including)
Nod32Eset–10994 (including)–10994 (including)
Nod32Eset–10995 (including)–10995 (including)
Nod32Eset–10996 (including)–10996 (including)
Nod32Eset–10997 (including)–10997 (including)
Nod32Eset–10998 (including)–10998 (including)
Nod32Eset–10999 (including)–10999 (including)
Nod32Eset–11000 (including)–11000 (including)
Nod32Eset–11001 (including)–11001 (including)
Nod32Eset–11002 (including)–11002 (including)
Nod32Eset–11003 (including)–11003 (including)
Nod32Eset–11004 (including)–11004 (including)
Nod32Eset–11005 (including)–11005 (including)
Nod32Eset–11006 (including)–11006 (including)
Nod32Eset–11007 (including)–11007 (including)
Nod32Eset–11008 (including)–11008 (including)
Nod32Eset–11009 (including)–11009 (including)
Nod32Eset–11010 (including)–11010 (including)
Nod32Eset–11011 (including)–11011 (including)
Nod32Eset–11012 (including)–11012 (including)
Nod32Eset–11013 (including)–11013 (including)
Nod32Eset–11014 (including)–11014 (including)
Nod32Eset–11015 (including)–11015 (including)
Nod32Eset–11016 (including)–11016 (including)
Nod32Eset–11017 (including)–11017 (including)
Nod32Eset–11018 (including)–11018 (including)
Nod32Eset–11019 (including)–11019 (including)
Nod32Eset–11020 (including)–11020 (including)
Nod32Eset–11021 (including)–11021 (including)
Nod32Eset–11022 (including)–11022 (including)
Nod32Eset–11023 (including)–11023 (including)
Nod32Eset–11024 (including)–11024 (including)
Nod32Eset–11025 (including)–11025 (including)
Nod32Eset–11026 (including)–11026 (including)
Nod32Eset–11027 (including)–11027 (including)
Nod32Eset–11028 (including)–11028 (including)
Nod32Eset–11029 (including)–11029 (including)
Nod32Eset–11030 (including)–11030 (including)
Nod32Eset–11031 (including)–11031 (including)
Nod32Eset–11032 (including)–11032 (including)
Nod32Eset–11033 (including)–11033 (including)
Nod32Eset–11034 (including)–11034 (including)
Nod32Eset–11035 (including)–11035 (including)
Nod32Eset–11036 (including)–11036 (including)
Nod32Eset–11037 (including)–11037 (including)
Nod32Eset–11038 (including)–11038 (including)
Nod32Eset–11039 (including)–11039 (including)
Nod32Eset–11040 (including)–11040 (including)
Nod32Eset–11041 (including)–11041 (including)
Nod32Eset–11042 (including)–11042 (including)
Nod32Eset–11043 (including)–11043 (including)
Nod32Eset–11044 (including)–11044 (including)
Nod32Eset–11045 (including)–11045 (including)
Nod32Eset–11046 (including)–11046 (including)
Nod32Eset–11047 (including)–11047 (including)
Nod32Eset–11048 (including)–11048 (including)
Nod32Eset–11049 (including)–11049 (including)
Nod32Eset–11050 (including)–11050 (including)
Nod32Eset–11051 (including)–11051 (including)
Nod32Eset–11052 (including)–11052 (including)
Nod32Eset–11053 (including)–11053 (including)
Nod32Eset–11054 (including)–11054 (including)
Nod32Eset–11055 (including)–11055 (including)
Nod32Eset–11056 (including)–11056 (including)
Nod32Eset–11057 (including)–11057 (including)
Nod32Eset–11058 (including)–11058 (including)
Nod32Eset–11059 (including)–11059 (including)
Nod32Eset–11060 (including)–11060 (including)
Nod32Eset–11061 (including)–11061 (including)
Nod32Eset–11062 (including)–11062 (including)
Nod32Eset–11063 (including)–11063 (including)
Nod32Eset–11064 (including)–11064 (including)
Nod32Eset–11065 (including)–11065 (including)
Nod32Eset–11066 (including)–11066 (including)
Nod32Eset–11067 (including)–11067 (including)
Nod32Eset–11068 (including)–11068 (including)
Nod32Eset–11069 (including)–11069 (including)
Nod32Eset–11070 (including)–11070 (including)
Nod32Eset–11071 (including)–11071 (including)
Nod32Eset–11072 (including)–11072 (including)
Nod32Eset–11073 (including)–11073 (including)
Nod32Eset–11074 (including)–11074 (including)
Nod32Eset–11075 (including)–11075 (including)
Nod32Eset–11076 (including)–11076 (including)
Nod32Eset–11077 (including)–11077 (including)
Nod32Eset–11078 (including)–11078 (including)
Nod32Eset–11079 (including)–11079 (including)
Nod32Eset–11080 (including)–11080 (including)
Nod32Eset–11081 (including)–11081 (including)
Nod32Eset–11082 (including)–11082 (including)
Nod32Eset–11083 (including)–11083 (including)
Nod32Eset–11084 (including)–11084 (including)
Nod32Eset–11085 (including)–11085 (including)
Nod32Eset–11086 (including)–11086 (including)
Nod32Eset–11087 (including)–11087 (including)
Nod32Eset–11088 (including)–11088 (including)
Nod32Eset–11089 (including)–11089 (including)
Nod32Eset–11090 (including)–11090 (including)
Nod32Eset–11091 (including)–11091 (including)
Nod32Eset–11092 (including)–11092 (including)
Nod32Eset–11093 (including)–11093 (including)
Nod32Eset–11094 (including)–11094 (including)
Nod32Eset–11095 (including)–11095 (including)
Nod32Eset–11096 (including)–11096 (including)
Nod32Eset–11097 (including)–11097 (including)
Nod32Eset–11098 (including)–11098 (including)
Nod32Eset–11099 (including)–11099 (including)
Nod32Eset–11100 (including)–11100 (including)
Nod32Eset–11101 (including)–11101 (including)
Nod32Eset–11102 (including)–11102 (including)
Nod32Eset–11103 (including)–11103 (including)
Nod32Eset–11104 (including)–11104 (including)
Nod32Eset–11105 (including)–11105 (including)
Nod32Eset–11106 (including)–11106 (including)
Nod32Eset–11107 (including)–11107 (including)
Nod32Eset–11108 (including)–11108 (including)
Nod32Eset–11109 (including)–11109 (including)
Nod32Eset–11110 (including)–11110 (including)
Nod32Eset–11111 (including)–11111 (including)
Nod32Eset–11112 (including)–11112 (including)
Nod32Eset–11113 (including)–11113 (including)
Nod32Eset–11114 (including)–11114 (including)
Nod32Eset–11115 (including)–11115 (including)
Nod32Eset–11116 (including)–11116 (including)
Nod32Eset–11117 (including)–11117 (including)
Nod32Eset–11118 (including)–11118 (including)
Nod32Eset–11119 (including)–11119 (including)
Nod32Eset–11120 (including)–11120 (including)
Nod32Eset–11121 (including)–11121 (including)
Nod32Eset–11122 (including)–11122 (including)
Nod32Eset–11123 (including)–11123 (including)
Nod32Eset–11124 (including)–11124 (including)
Nod32Eset–11125 (including)–11125 (including)
Nod32Eset–11126 (including)–11126 (including)
Nod32Eset–11127 (including)–11127 (including)
Nod32Eset–11128 (including)–11128 (including)
Nod32Eset–11129 (including)–11129 (including)
Nod32Eset–11130 (including)–11130 (including)
Nod32Eset–11131 (including)–11131 (including)
Nod32Eset–11132 (including)–11132 (including)
Nod32Eset–11133 (including)–11133 (including)
Nod32Eset–11134 (including)–11134 (including)
Nod32Eset–11135 (including)–11135 (including)
Nod32Eset–11136 (including)–11136 (including)
Nod32Eset–11137 (including)–11137 (including)
Nod32Eset–11138 (including)–11138 (including)
Nod32Eset–11139 (including)–11139 (including)
Nod32Eset–11140 (including)–11140 (including)
Nod32Eset–11141 (including)–11141 (including)
Nod32Eset–11142 (including)–11142 (including)
Nod32Eset–11143 (including)–11143 (including)
Nod32Eset–11144 (including)–11144 (including)
Nod32Eset–11145 (including)–11145 (including)
Nod32Eset–11146 (including)–11146 (including)
Nod32Eset–11147 (including)–11147 (including)
Nod32Eset–11148 (including)–11148 (including)
Nod32Eset–11149 (including)–11149 (including)
Nod32Eset–11150 (including)–11150 (including)
Nod32Eset–11151 (including)–11151 (including)
Nod32Eset–11152 (including)–11152 (including)
Nod32Eset–11153 (including)–11153 (including)
Nod32Eset–11154 (including)–11154 (including)
Nod32Eset–11155 (including)–11155 (including)
Nod32Eset–11156 (including)–11156 (including)
Nod32Eset–11157 (including)–11157 (including)
Nod32Eset–11158 (including)–11158 (including)
Nod32Eset–11159 (including)–11159 (including)
Nod32Eset–11160 (including)–11160 (including)
Nod32Eset–11161 (including)–11161 (including)
Nod32Eset–11162 (including)–11162 (including)
Nod32Eset–11163 (including)–11163 (including)
Nod32Eset–11164 (including)–11164 (including)
Nod32Eset–11165 (including)–11165 (including)
Nod32Eset–11166 (including)–11166 (including)
Nod32Eset–11167 (including)–11167 (including)
Nod32Eset–11168 (including)–11168 (including)
Nod32Eset–11169 (including)–11169 (including)
Nod32Eset–11170 (including)–11170 (including)
Nod32Eset–11171 (including)–11171 (including)
Nod32Eset–11172 (including)–11172 (including)
Nod32Eset–11173 (including)–11173 (including)
Nod32Eset–11174 (including)–11174 (including)
Nod32Eset–11175 (including)–11175 (including)
Nod32Eset–11176 (including)–11176 (including)
Nod32Eset–11177 (including)–11177 (including)
Nod32Eset–11178 (including)–11178 (including)
Nod32Eset–11179 (including)–11179 (including)
Nod32Eset–11180 (including)–11180 (including)
Nod32Eset–11181 (including)–11181 (including)
Nod32Eset–11182 (including)–11182 (including)
Nod32Eset–11183 (including)–11183 (including)
Nod32Eset–11184 (including)–11184 (including)
Nod32Eset–11185 (including)–11185 (including)
Nod32Eset–11186 (including)–11186 (including)
Nod32Eset–11187 (including)–11187 (including)
Nod32Eset–11188 (including)–11188 (including)
Nod32Eset–11189 (including)–11189 (including)
Nod32Eset–11190 (including)–11190 (including)
Nod32Eset–11191 (including)–11191 (including)
Nod32Eset–11192 (including)–11192 (including)
Nod32Eset–11193 (including)–11193 (including)
Nod32Eset–11194 (including)–11194 (including)
Nod32Eset–11195 (including)–11195 (including)
Nod32Eset–11196 (including)–11196 (including)
Nod32Eset–11197 (including)–11197 (including)
Nod32Eset–11198 (including)–11198 (including)
Nod32Eset–11199 (including)–11199 (including)
Nod32Eset–11200 (including)–11200 (including)
Nod32Eset–11201 (including)–11201 (including)
Nod32Eset–11202 (including)–11202 (including)
Nod32Eset–11203 (including)–11203 (including)
Nod32Eset–11204 (including)–11204 (including)
Nod32Eset–11205 (including)–11205 (including)
Nod32Eset–11206 (including)–11206 (including)
Nod32Eset–11207 (including)–11207 (including)
Nod32Eset–11208 (including)–11208 (including)
Nod32Eset–11209 (including)–11209 (including)
Nod32Eset–11210 (including)–11210 (including)
Nod32Eset–11211 (including)–11211 (including)
Nod32Eset–11212 (including)–11212 (including)
Nod32Eset–11213 (including)–11213 (including)
Nod32Eset–11214 (including)–11214 (including)
Nod32Eset–11215 (including)–11215 (including)
Nod32Eset–11216 (including)–11216 (including)
Nod32Eset–11217 (including)–11217 (including)
Nod32Eset–11218 (including)–11218 (including)
Nod32Eset–11219 (including)–11219 (including)
Nod32Eset–11220 (including)–11220 (including)
Nod32Eset–11221 (including)–11221 (including)
Nod32Eset–11222 (including)–11222 (including)
Nod32Eset–11223 (including)–11223 (including)
Nod32Eset–11224 (including)–11224 (including)
Nod32Eset–11225 (including)–11225 (including)
Nod32Eset–11226 (including)–11226 (including)
Nod32Eset–11227 (including)–11227 (including)
Nod32Eset–11228 (including)–11228 (including)
Nod32Eset–11229 (including)–11229 (including)
Nod32Eset–11230 (including)–11230 (including)
Nod32Eset–11231 (including)–11231 (including)
Nod32Eset–11232 (including)–11232 (including)
Nod32Eset–11233 (including)–11233 (including)
Nod32Eset–11234 (including)–11234 (including)
Nod32Eset–11235 (including)–11235 (including)
Nod32Eset–11236 (including)–11236 (including)
Nod32Eset–11237 (including)–11237 (including)
Nod32Eset–11238 (including)–11238 (including)
Nod32Eset–11239 (including)–11239 (including)
Nod32Eset–11240 (including)–11240 (including)
Nod32Eset–11241 (including)–11241 (including)
Nod32Eset–11242 (including)–11242 (including)
Nod32Eset–11243 (including)–11243 (including)
Nod32Eset–11244 (including)–11244 (including)
Nod32Eset–11245 (including)–11245 (including)
Nod32Eset–11246 (including)–11246 (including)
Nod32Eset–11247 (including)–11247 (including)
Nod32Eset–11248 (including)–11248 (including)
Nod32Eset–11249 (including)–11249 (including)
Nod32Eset–11250 (including)–11250 (including)
Nod32Eset–11251 (including)–11251 (including)
Nod32Eset–11252 (including)–11252 (including)
Nod32Eset–11253 (including)–11253 (including)
Nod32Eset–11254 (including)–11254 (including)
Nod32Eset–11255 (including)–11255 (including)
Nod32Eset–11256 (including)–11256 (including)
Nod32Eset–11257 (including)–11257 (including)
Nod32Eset–11258 (including)–11258 (including)
Nod32Eset–11259 (including)–11259 (including)
Nod32Eset–11260 (including)–11260 (including)
Nod32Eset–11261 (including)–11261 (including)
Nod32Eset–11262 (including)–11262 (including)
Nod32Eset–11263 (including)–11263 (including)
Nod32Eset–11264 (including)–11264 (including)
Nod32Eset–11265 (including)–11265 (including)
Nod32Eset–11266 (including)–11266 (including)
Nod32Eset–11267 (including)–11267 (including)
Nod32Eset–11268 (including)–11268 (including)
Nod32Eset–11269 (including)–11269 (including)
Nod32Eset–11270 (including)–11270 (including)
Nod32Eset–11271 (including)–11271 (including)
Nod32Eset–11272 (including)–11272 (including)
Nod32Eset–11273 (including)–11273 (including)
Nod32Eset–11274 (including)–11274 (including)
Nod32Eset–11275 (including)–11275 (including)
Nod32Eset–11276 (including)–11276 (including)
Nod32Eset–11277 (including)–11277 (including)
Nod32Eset–11278 (including)–11278 (including)
Nod32Eset–11279 (including)–11279 (including)
Nod32Eset–11280 (including)–11280 (including)
Nod32Eset–11281 (including)–11281 (including)
Nod32Eset–11282 (including)–11282 (including)
Nod32Eset–11283 (including)–11283 (including)
Nod32Eset–11284 (including)–11284 (including)
Nod32Eset–11285 (including)–11285 (including)
Nod32Eset–11286 (including)–11286 (including)
Nod32Eset–11287 (including)–11287 (including)
Nod32Eset–11288 (including)–11288 (including)
Nod32Eset–11289 (including)–11289 (including)
Nod32Eset–11290 (including)–11290 (including)
Nod32Eset–11291 (including)–11291 (including)
Nod32Eset–11292 (including)–11292 (including)
Nod32Eset–11293 (including)–11293 (including)
Nod32Eset–11294 (including)–11294 (including)
Nod32Eset–11295 (including)–11295 (including)
Nod32Eset–11296 (including)–11296 (including)
Nod32Eset–11297 (including)–11297 (including)
Nod32Eset–11298 (including)–11298 (including)
Nod32Eset–11299 (including)–11299 (including)
Nod32Eset–11300 (including)–11300 (including)
Nod32Eset–11301 (including)–11301 (including)
Nod32Eset–11302 (including)–11302 (including)
Nod32Eset–11303 (including)–11303 (including)
Nod32Eset–11304 (including)–11304 (including)
Nod32Eset–11305 (including)–11305 (including)
Nod32Eset–11306 (including)–11306 (including)
Nod32Eset–11307 (including)–11307 (including)
Nod32Eset–11308 (including)–11308 (including)
Nod32Eset–11309 (including)–11309 (including)
Nod32Eset–11310 (including)–11310 (including)
Nod32Eset–11311 (including)–11311 (including)
Nod32Eset–11312 (including)–11312 (including)
Nod32Eset–11313 (including)–11313 (including)
Nod32Eset–11314 (including)–11314 (including)
Nod32Eset–11315 (including)–11315 (including)
Nod32Eset–11316 (including)–11316 (including)
Nod32Eset–11317 (including)–11317 (including)
Nod32Eset–11318 (including)–11318 (including)
Nod32Eset–11319 (including)–11319 (including)
Nod32Eset–11320 (including)–11320 (including)
Nod32Eset–11321 (including)–11321 (including)
Nod32Eset–11322 (including)–11322 (including)
Nod32Eset–11323 (including)–11323 (including)
Nod32Eset–11324 (including)–11324 (including)
Nod32Eset–11325 (including)–11325 (including)
Nod32Eset–11326 (including)–11326 (including)
Nod32Eset–11327 (including)–11327 (including)
Nod32Eset–11328 (including)–11328 (including)
Nod32Eset–11329 (including)–11329 (including)
Nod32Eset–11330 (including)–11330 (including)
Nod32Eset–11331 (including)–11331 (including)
Nod32Eset–11332 (including)–11332 (including)
Nod32Eset–11333 (including)–11333 (including)
Nod32Eset–11334 (including)–11334 (including)
Nod32Eset–11335 (including)–11335 (including)
Nod32Eset–11336 (including)–11336 (including)
Nod32Eset–11337 (including)–11337 (including)
Nod32Eset–11338 (including)–11338 (including)
Nod32Eset–11339 (including)–11339 (including)
Nod32Eset–11340 (including)–11340 (including)
Nod32Eset–11341 (including)–11341 (including)
Nod32Eset–11342 (including)–11342 (including)
Nod32Eset–11343 (including)–11343 (including)
Nod32Eset–11344 (including)–11344 (including)
Nod32Eset–11345 (including)–11345 (including)
Nod32Eset–11346 (including)–11346 (including)
Nod32Eset–11347 (including)–11347 (including)
Nod32Eset–11348 (including)–11348 (including)
Nod32Eset–11349 (including)–11349 (including)
Nod32Eset–11350 (including)–11350 (including)
Nod32Eset–11351 (including)–11351 (including)
Nod32Eset–11352 (including)–11352 (including)
Nod32Eset–11353 (including)–11353 (including)
Nod32Eset–11354 (including)–11354 (including)
Nod32Eset–11355 (including)–11355 (including)
Nod32Eset–11356 (including)–11356 (including)
Nod32Eset–11357 (including)–11357 (including)
Nod32Eset–11358 (including)–11358 (including)
Nod32Eset–11359 (including)–11359 (including)
Nod32Eset–11360 (including)–11360 (including)
Nod32Eset–11361 (including)–11361 (including)
Nod32Eset–11362 (including)–11362 (including)
Nod32Eset–11363 (including)–11363 (including)
Nod32Eset–11364 (including)–11364 (including)
Nod32Eset–11365 (including)–11365 (including)
Nod32Eset–11366 (including)–11366 (including)
Nod32Eset–11367 (including)–11367 (including)
Nod32Eset–11368 (including)–11368 (including)
Nod32Eset–11369 (including)–11369 (including)
Nod32Eset–11370 (including)–11370 (including)
Nod32Eset–11371 (including)–11371 (including)
Nod32Eset–11372 (including)–11372 (including)
Nod32Eset–11373 (including)–11373 (including)
Nod32Eset–11374 (including)–11374 (including)
Nod32Eset–11375 (including)–11375 (including)
Nod32Eset–11376 (including)–11376 (including)
Nod32Eset–11377 (including)–11377 (including)
Nod32Eset–11378 (including)–11378 (including)
Nod32Eset–11379 (including)–11379 (including)
Nod32Eset–11380 (including)–11380 (including)
Nod32Eset–11381 (including)–11381 (including)
Nod32Eset–11382 (including)–11382 (including)
Nod32Eset–11383 (including)–11383 (including)
Nod32Eset–11384 (including)–11384 (including)
Nod32Eset–11385 (including)–11385 (including)
Nod32Eset–11386 (including)–11386 (including)
Nod32Eset–11387 (including)–11387 (including)
Nod32Eset–11388 (including)–11388 (including)
Nod32Eset–11389 (including)–11389 (including)
Nod32Eset–11390 (including)–11390 (including)
Nod32Eset–11391 (including)–11391 (including)
Nod32Eset–11392 (including)–11392 (including)
Nod32Eset–11393 (including)–11393 (including)
Nod32Eset–11394 (including)–11394 (including)
Nod32Eset–11395 (including)–11395 (including)
Nod32Eset–11396 (including)–11396 (including)
Nod32Eset–11397 (including)–11397 (including)
Nod32Eset–11398 (including)–11398 (including)
Nod32Eset–11399 (including)–11399 (including)
Nod32Eset–11400 (including)–11400 (including)
Nod32Eset–11401 (including)–11401 (including)
Nod32Eset–11402 (including)–11402 (including)
Nod32Eset–11403 (including)–11403 (including)
Nod32Eset–11404 (including)–11404 (including)
Nod32Eset–11405 (including)–11405 (including)
Nod32Eset–11406 (including)–11406 (including)
Nod32Eset–11407 (including)–11407 (including)
Nod32Eset–11408 (including)–11408 (including)
Nod32Eset–11409 (including)–11409 (including)
Nod32Eset–11410 (including)–11410 (including)
Nod32Eset–11411 (including)–11411 (including)
Nod32Eset–11412 (including)–11412 (including)
Nod32Eset–11413 (including)–11413 (including)
Nod32Eset–11414 (including)–11414 (including)
Nod32Eset–11415 (including)–11415 (including)
Nod32Eset–11416 (including)–11416 (including)
Nod32Eset–11417 (including)–11417 (including)
Nod32Eset–11418 (including)–11418 (including)
Nod32Eset–11419 (including)–11419 (including)
Nod32Eset–11420 (including)–11420 (including)
Nod32Eset–11421 (including)–11421 (including)
Nod32Eset–11423 (including)–11423 (including)
Nod32Eset–11424 (including)–11424 (including)
Nod32Eset–11425 (including)–11425 (including)
Nod32Eset–11426 (including)–11426 (including)
Nod32Eset–11427 (including)–11427 (including)
Nod32Eset–11428 (including)–11428 (including)
Nod32Eset–11429 (including)–11429 (including)
Nod32Eset–11430 (including)–11430 (including)
Nod32Eset–11431 (including)–11431 (including)
Nod32Eset–11432 (including)–11432 (including)
Nod32Eset–11433 (including)–11433 (including)
Nod32Eset–11434 (including)–11434 (including)
Nod32Eset–11435 (including)–11435 (including)
Nod32Eset–11436 (including)–11436 (including)
Nod32Eset–11437 (including)–11437 (including)
Nod32Eset–11438 (including)–11438 (including)
Nod32Eset–11439 (including)–11439 (including)
Nod32Eset–11440 (including)–11440 (including)
Nod32Eset–11441 (including)–11441 (including)
Nod32Eset–11442 (including)–11442 (including)
Nod32Eset–11443 (including)–11443 (including)
Nod32Eset–11444 (including)–11444 (including)
Nod32Eset–11445 (including)–11445 (including)
Nod32Eset–11446 (including)–11446 (including)
Nod32Eset–11447 (including)–11447 (including)
Nod32Eset–11448 (including)–11448 (including)
Nod32Eset–11449 (including)–11449 (including)
Nod32Eset–11450 (including)–11450 (including)
Nod32Eset–11451 (including)–11451 (including)
Nod32Eset–11452 (including)–11452 (including)
Nod32Eset–11453 (including)–11453 (including)
Nod32Eset–11454 (including)–11454 (including)
Nod32Eset–11455 (including)–11455 (including)
Nod32Eset–11456 (including)–11456 (including)
Nod32Eset–11457 (including)–11457 (including)
Nod32Eset–11458 (including)–11458 (including)
Nod32Eset–11459 (including)–11459 (including)
Nod32Eset–11460 (including)–11460 (including)
Nod32Eset–11461 (including)–11461 (including)
Nod32Eset–11462 (including)–11462 (including)
Nod32Eset–11463 (including)–11463 (including)
Nod32Eset–11464 (including)–11464 (including)
Nod32Eset–11465 (including)–11465 (including)
Nod32Eset–11466 (including)–11466 (including)
Nod32Eset–11467 (including)–11467 (including)
Nod32Eset–11468 (including)–11468 (including)
Nod32Eset–11471 (including)–11471 (including)
Nod32Eset–11472 (including)–11472 (including)
Nod32Eset–11473 (including)–11473 (including)
Nod32Eset–11474 (including)–11474 (including)
Nod32Eset–11475 (including)–11475 (including)
Nod32Eset–11476 (including)–11476 (including)
Nod32Eset–11477 (including)–11477 (including)
Nod32Eset–11478 (including)–11478 (including)
Nod32Eset–11479 (including)–11479 (including)
Nod32Eset–11480 (including)–11480 (including)
Nod32Eset–11481 (including)–11481 (including)
Nod32Eset–11482 (including)–11482 (including)
Nod32Eset–11483 (including)–11483 (including)
Nod32Eset–11484 (including)–11484 (including)
Nod32Eset–11485 (including)–11485 (including)
Nod32Eset–11486 (including)–11486 (including)
Nod32Eset–11487 (including)–11487 (including)
Nod32Eset–11488 (including)–11488 (including)
Nod32Eset–11489 (including)–11489 (including)
Nod32Eset–11490 (including)–11490 (including)
Nod32Eset–11491 (including)–11491 (including)
Nod32Eset–11492 (including)–11492 (including)
Nod32Eset–11493 (including)–11493 (including)
Nod32Eset–11494 (including)–11494 (including)
Nod32Eset–11495 (including)–11495 (including)
Nod32Eset–11496 (including)–11496 (including)
Nod32Eset–11497 (including)–11497 (including)
Nod32Eset–11498 (including)–11498 (including)
Nod32Eset–11499 (including)–11499 (including)
Nod32Eset–11500 (including)–11500 (including)
Nod32Eset–11501 (including)–11501 (including)
Nod32Eset–11502 (including)–11502 (including)
Nod32Eset–11503 (including)–11503 (including)
Nod32Eset–11504 (including)–11504 (including)
Nod32Eset–11505 (including)–11505 (including)
Nod32Eset–11506 (including)–11506 (including)
Nod32Eset–11507 (including)–11507 (including)
Nod32Eset–11508 (including)–11508 (including)
Nod32Eset–11509 (including)–11509 (including)
Nod32Eset–11510 (including)–11510 (including)
Nod32Eset–11511 (including)–11511 (including)
Nod32Eset–11512 (including)–11512 (including)
Nod32Eset–11513 (including)–11513 (including)
Nod32Eset–11514 (including)–11514 (including)
Nod32Eset–11515 (including)–11515 (including)
Nod32Eset–11516 (including)–11516 (including)
Nod32Eset–11517 (including)–11517 (including)
Nod32Eset–11518 (including)–11518 (including)
Nod32Eset–11519 (including)–11519 (including)
Nod32Eset–11520 (including)–11520 (including)
Nod32Eset–11521 (including)–11521 (including)
Nod32Eset–11522 (including)–11522 (including)
Nod32Eset–11523 (including)–11523 (including)
Nod32Eset–11524 (including)–11524 (including)
Nod32Eset–11525 (including)–11525 (including)
Nod32Eset–11526 (including)–11526 (including)
Nod32Eset–11527 (including)–11527 (including)
Nod32Eset–11528 (including)–11528 (including)
Nod32Eset–11529 (including)–11529 (including)
Nod32Eset–11530 (including)–11530 (including)
Nod32Eset–11531 (including)–11531 (including)
Nod32Eset–11532 (including)–11532 (including)
Nod32Eset–11533 (including)–11533 (including)
Nod32Eset–11534 (including)–11534 (including)
Nod32Eset–11535 (including)–11535 (including)
Nod32Eset–11536 (including)–11536 (including)
Nod32Eset–11537 (including)–11537 (including)
Nod32Eset–11538 (including)–11538 (including)
Nod32Eset–11539 (including)–11539 (including)
Nod32Eset–11540 (including)–11540 (including)
Nod32Eset–11541 (including)–11541 (including)
Nod32Eset–11542 (including)–11542 (including)
Nod32Eset–11543 (including)–11543 (including)
Nod32Eset–11544 (including)–11544 (including)
Nod32Eset–11545 (including)–11545 (including)
Nod32Eset–11546 (including)–11546 (including)
Nod32Eset–11547 (including)–11547 (including)
Nod32Eset–11548 (including)–11548 (including)
Nod32Eset–11549 (including)–11549 (including)
Nod32Eset–11550 (including)–11550 (including)
Nod32Eset–11551 (including)–11551 (including)
Nod32Eset–11552 (including)–11552 (including)
Nod32Eset–11553 (including)–11553 (including)
Nod32Eset–11554 (including)–11554 (including)
Nod32Eset–11555 (including)–11555 (including)
Nod32Eset–11556 (including)–11556 (including)
Nod32Eset–11557 (including)–11557 (including)
Nod32Eset–11558 (including)–11558 (including)
Nod32Eset–11559 (including)–11559 (including)
Nod32Eset–11560 (including)–11560 (including)
Nod32Eset–11561 (including)–11561 (including)
Nod32Eset–11562 (including)–11562 (including)
Nod32Eset–11563 (including)–11563 (including)
Nod32Eset–11564 (including)–11564 (including)
Nod32Eset–11565 (including)–11565 (including)
Nod32Eset–11566 (including)–11566 (including)
Nod32Eset–11567 (including)–11567 (including)
Nod32Eset–11568 (including)–11568 (including)
Nod32Eset–11569 (including)–11569 (including)
Nod32Eset–11570 (including)–11570 (including)
Nod32Eset–11571 (including)–11571 (including)
Nod32Eset–11572 (including)–11572 (including)
Nod32Eset–11573 (including)–11573 (including)
Nod32Eset–11574 (including)–11574 (including)
Nod32Eset–11575 (including)–11575 (including)
Nod32Eset–11576 (including)–11576 (including)
Nod32Eset–11577 (including)–11577 (including)
Nod32Eset–11578 (including)–11578 (including)
Nod32Eset–11579 (including)–11579 (including)
Nod32Eset–11580 (including)–11580 (including)
Nod32Eset–11581 (including)–11581 (including)
Nod32Eset–11582 (including)–11582 (including)
Nod32Eset–11583 (including)–11583 (including)
Nod32Eset–11584 (including)–11584 (including)
Nod32Eset–11585 (including)–11585 (including)
Nod32Eset–11586 (including)–11586 (including)
Nod32Eset–11587 (including)–11587 (including)
Nod32Eset–11588 (including)–11588 (including)
Nod32Eset–11589 (including)–11589 (including)
Nod32Eset–11590 (including)–11590 (including)
Nod32Eset–11591 (including)–11591 (including)
Nod32Eset–11592 (including)–11592 (including)
Nod32Eset–11593 (including)–11593 (including)
Nod32Eset–11594 (including)–11594 (including)
Nod32Eset–11595 (including)–11595 (including)
Nod32Eset–11596 (including)–11596 (including)
Nod32Eset–11597 (including)–11597 (including)
Nod32Eset–11598 (including)–11598 (including)
Nod32Eset–11599 (including)–11599 (including)
Nod32Eset–11600 (including)–11600 (including)
Nod32Eset–11601 (including)–11601 (including)
Nod32Eset–11602 (including)–11602 (including)
Nod32Eset–11603 (including)–11603 (including)
Nod32Eset–11604 (including)–11604 (including)
Nod32Eset–11605 (including)–11605 (including)
Nod32Eset–11606 (including)–11606 (including)
Nod32Eset–11607 (including)–11607 (including)
Nod32Eset–11608 (including)–11608 (including)
Nod32Eset–11609 (including)–11609 (including)
Nod32Eset–11610 (including)–11610 (including)
Nod32Eset–11611 (including)–11611 (including)
Nod32Eset–11612 (including)–11612 (including)
Nod32Eset–11613 (including)–11613 (including)
Nod32Eset–11614 (including)–11614 (including)
Nod32Eset–11615 (including)–11615 (including)
Nod32Eset–11616 (including)–11616 (including)
Nod32Eset–11617 (including)–11617 (including)
Nod32Eset–11618 (including)–11618 (including)
Nod32Eset–11619 (including)–11619 (including)
Nod32Eset–11620 (including)–11620 (including)
Nod32Eset–11621 (including)–11621 (including)
Nod32Eset–11622 (including)–11622 (including)
Nod32Eset–11623 (including)–11623 (including)
Nod32Eset–11624 (including)–11624 (including)
Nod32Eset–11625 (including)–11625 (including)
Nod32Eset–11626 (including)–11626 (including)
Nod32Eset–11627 (including)–11627 (including)
Nod32Eset–11628 (including)–11628 (including)
Nod32Eset–11629 (including)–11629 (including)
Nod32Eset–11630 (including)–11630 (including)
Nod32Eset–11631 (including)–11631 (including)
Nod32Eset–11632 (including)–11632 (including)
Nod32Eset–11633 (including)–11633 (including)
Nod32Eset–11634 (including)–11634 (including)
Nod32Eset–11635 (including)–11635 (including)
Nod32Eset–11636 (including)–11636 (including)
Nod32Eset–11637 (including)–11637 (including)
Nod32Eset–11638 (including)–11638 (including)
Nod32Eset–11639 (including)–11639 (including)
Nod32Eset–11640 (including)–11640 (including)
Nod32Eset–11641 (including)–11641 (including)
Nod32Eset–11642 (including)–11642 (including)
Nod32Eset–11643 (including)–11643 (including)
Nod32Eset–11644 (including)–11644 (including)
Nod32Eset–11645 (including)–11645 (including)
Nod32Eset–11646 (including)–11646 (including)
Nod32Eset–11647 (including)–11647 (including)
Nod32Eset–11648 (including)–11648 (including)
Nod32Eset–11649 (including)–11649 (including)
Nod32Eset–11650 (including)–11650 (including)
Nod32Eset–11651 (including)–11651 (including)
Nod32Eset–11652 (including)–11652 (including)
Nod32Eset–11653 (including)–11653 (including)
Nod32Eset–11654 (including)–11654 (including)
Nod32Eset–11655 (including)–11655 (including)
Nod32Eset–11656 (including)–11656 (including)
Nod32Eset–11657 (including)–11657 (including)
Nod32Eset–11658 (including)–11658 (including)
Nod32Eset–11659 (including)–11659 (including)
Nod32Eset–11660 (including)–11660 (including)
Nod32Eset–11661 (including)–11661 (including)
Nod32Eset–11662 (including)–11662 (including)
Nod32Eset–11663 (including)–11663 (including)
Nod32Eset–11664 (including)–11664 (including)
Nod32Eset–11665 (including)–11665 (including)
Nod32Eset–11666 (including)–11666 (including)
Nod32Eset–11667 (including)–11667 (including)
Nod32Eset–11668 (including)–11668 (including)
Nod32Eset–11669 (including)–11669 (including)
Nod32Eset–11670 (including)–11670 (including)
Nod32Eset–11671 (including)–11671 (including)
Nod32Eset–11672 (including)–11672 (including)
Nod32Eset–11673 (including)–11673 (including)
Nod32Eset–11674 (including)–11674 (including)
Nod32Eset–11675 (including)–11675 (including)
Nod32Eset–11676 (including)–11676 (including)
Nod32Eset–11677 (including)–11677 (including)
Nod32Eset–11678 (including)–11678 (including)
Nod32Eset–11679 (including)–11679 (including)
Nod32Eset–11680 (including)–11680 (including)
Nod32Eset–11681 (including)–11681 (including)
Nod32Eset–11682 (including)–11682 (including)
Nod32Eset–11683 (including)–11683 (including)
Nod32Eset–11684 (including)–11684 (including)
Nod32Eset–11685 (including)–11685 (including)
Nod32Eset–11686 (including)–11686 (including)
Nod32Eset–11687 (including)–11687 (including)
Nod32Eset–11688 (including)–11688 (including)
Nod32Eset–11689 (including)–11689 (including)
Nod32Eset–11690 (including)–11690 (including)
Nod32Eset–11691 (including)–11691 (including)
Nod32Eset–11692 (including)–11692 (including)
Nod32Eset–11693 (including)–11693 (including)
Nod32Eset–11694 (including)–11694 (including)
Nod32Eset–11695 (including)–11695 (including)
Nod32Eset–11696 (including)–11696 (including)
Nod32Eset–11697 (including)–11697 (including)
Nod32Eset–11698 (including)–11698 (including)
Nod32Eset–11699 (including)–11699 (including)
Nod32Eset–11700 (including)–11700 (including)
Nod32Eset–11701 (including)–11701 (including)
Nod32Eset–11702 (including)–11702 (including)
Nod32Eset–11703 (including)–11703 (including)
Nod32Eset–11704 (including)–11704 (including)
Nod32Eset–11705 (including)–11705 (including)
Nod32Eset–11706 (including)–11706 (including)
Nod32Eset–11707 (including)–11707 (including)
Nod32Eset–11708 (including)–11708 (including)
Nod32Eset–11709 (including)–11709 (including)
Nod32Eset–11710 (including)–11710 (including)
Nod32Eset–11711 (including)–11711 (including)
Nod32Eset–11712 (including)–11712 (including)
Nod32Eset–11713 (including)–11713 (including)
Nod32Eset–11714 (including)–11714 (including)
Nod32Eset–11715 (including)–11715 (including)
Nod32Eset–11716 (including)–11716 (including)
Nod32Eset–11717 (including)–11717 (including)
Nod32Eset–11718 (including)–11718 (including)
Nod32Eset–11719 (including)–11719 (including)
Nod32Eset–11720 (including)–11720 (including)
Nod32Eset–11721 (including)–11721 (including)
Nod32Eset–11722 (including)–11722 (including)
Nod32Eset–11723 (including)–11723 (including)
Nod32Eset–11724 (including)–11724 (including)
Nod32Eset–11725 (including)–11725 (including)
Nod32Eset–11726 (including)–11726 (including)
Nod32Eset–11727 (including)–11727 (including)
Nod32Eset–11728 (including)–11728 (including)
Nod32Eset–11729 (including)–11729 (including)
Nod32Eset–11730 (including)–11730 (including)
Nod32Eset–11731 (including)–11731 (including)
Nod32Eset–11732 (including)–11732 (including)
Nod32Eset–11733 (including)–11733 (including)
Nod32Eset–11734 (including)–11734 (including)
Nod32Eset–11735 (including)–11735 (including)
Nod32Eset–11736 (including)–11736 (including)
Nod32Eset–11737 (including)–11737 (including)
Nod32Eset–11738 (including)–11738 (including)
Nod32Eset–11739 (including)–11739 (including)
Nod32Eset–11740 (including)–11740 (including)
Nod32Eset–11741 (including)–11741 (including)
Nod32Eset–11742 (including)–11742 (including)
Nod32Eset–11743 (including)–11743 (including)
Nod32Eset–11744 (including)–11744 (including)
Nod32Eset–11745 (including)–11745 (including)
Nod32Eset–11746 (including)–11746 (including)
Nod32Eset–11747 (including)–11747 (including)
Nod32Eset–11748 (including)–11748 (including)
Nod32Eset–11749 (including)–11749 (including)
Nod32Eset–11750 (including)–11750 (including)
Nod32Eset–11751 (including)–11751 (including)
Nod32Eset–11752 (including)–11752 (including)
Nod32Eset–11753 (including)–11753 (including)
Nod32Eset–11754 (including)–11754 (including)
Nod32Eset–11755 (including)–11755 (including)
Nod32Eset–11756 (including)–11756 (including)
Nod32Eset–11757 (including)–11757 (including)
Nod32Eset–11758 (including)–11758 (including)
Nod32Eset–11759 (including)–11759 (including)
Nod32Eset–11760 (including)–11760 (including)
Nod32Eset–11761 (including)–11761 (including)
Nod32Eset–11762 (including)–11762 (including)
Nod32Eset–11763 (including)–11763 (including)
Nod32Eset–11764 (including)–11764 (including)
Nod32Eset–11765 (including)–11765 (including)
Nod32Eset–11766 (including)–11766 (including)
Nod32Eset–11767 (including)–11767 (including)
Nod32Eset–11768 (including)–11768 (including)
Nod32Eset–11769 (including)–11769 (including)
Nod32Eset–11770 (including)–11770 (including)
Nod32Eset–11771 (including)–11771 (including)
Nod32Eset–11772 (including)–11772 (including)
Nod32Eset–11773 (including)–11773 (including)
Nod32Eset–11774 (including)–11774 (including)
Nod32Eset–11775 (including)–11775 (including)
Nod32Eset–11776 (including)–11776 (including)
Nod32Eset–11777 (including)–11777 (including)
Nod32Eset–11778 (including)–11778 (including)
Nod32Eset–11779 (including)–11779 (including)
Nod32Eset–11780 (including)–11780 (including)
Nod32Eset–11781 (including)–11781 (including)
Nod32Eset–11782 (including)–11782 (including)
Nod32Eset–11783 (including)–11783 (including)
Nod32Eset–11784 (including)–11784 (including)
Nod32Eset–11785 (including)–11785 (including)
Nod32Eset–11786 (including)–11786 (including)
Nod32Eset–11787 (including)–11787 (including)
Nod32Eset–11788 (including)–11788 (including)
Nod32Eset–11789 (including)–11789 (including)
Nod32Eset–11790 (including)–11790 (including)
Nod32Eset–11791 (including)–11791 (including)
Nod32Eset–11792 (including)–11792 (including)
Nod32Eset–11793 (including)–11793 (including)
Nod32Eset–11794 (including)–11794 (including)
Nod32Eset–11795 (including)–11795 (including)
Nod32Eset–11796 (including)–11796 (including)
Nod32Eset–11797 (including)–11797 (including)
Nod32Eset–11798 (including)–11798 (including)
Nod32Eset–11799 (including)–11799 (including)
Nod32Eset–11800 (including)–11800 (including)
Nod32Eset–11801 (including)–11801 (including)
Nod32Eset–11802 (including)–11802 (including)
Nod32Eset–11803 (including)–11803 (including)
Nod32Eset–11804 (including)–11804 (including)
Nod32Eset–11805 (including)–11805 (including)
Nod32Eset–11806 (including)–11806 (including)
Nod32Eset–11807 (including)–11807 (including)
Nod32Eset–11808 (including)–11808 (including)
Nod32Eset–11809 (including)–11809 (including)
Nod32Eset–11810 (including)–11810 (including)
Nod32Eset–11811 (including)–11811 (including)
Nod32Eset–11812 (including)–11812 (including)
Nod32Eset–11813 (including)–11813 (including)
Nod32Eset–11814 (including)–11814 (including)
Nod32Eset–11815 (including)–11815 (including)
Nod32Eset–11816 (including)–11816 (including)
Nod32Eset–11817 (including)–11817 (including)
Nod32Eset–11818 (including)–11818 (including)
Nod32Eset–11819 (including)–11819 (including)
Nod32Eset–11820 (including)–11820 (including)
Nod32Eset–11821 (including)–11821 (including)
Nod32Eset–11822 (including)–11822 (including)
Nod32Eset–11823 (including)–11823 (including)
Nod32Eset–11824 (including)–11824 (including)
Nod32Eset–11825 (including)–11825 (including)
Nod32Eset–11826 (including)–11826 (including)
Nod32Eset–11827 (including)–11827 (including)
Nod32Eset–11828 (including)–11828 (including)
Nod32Eset–11829 (including)–11829 (including)
Nod32Eset–11830 (including)–11830 (including)
Nod32Eset–11831 (including)–11831 (including)
Nod32Eset–11832 (including)–11832 (including)
Nod32Eset–11833 (including)–11833 (including)
Nod32Eset–11834 (including)–11834 (including)
Nod32Eset–11835 (including)–11835 (including)
Nod32Eset–11836 (including)–11836 (including)
Nod32Eset–11837 (including)–11837 (including)
Nod32Eset–11838 (including)–11838 (including)
Nod32Eset–11839 (including)–11839 (including)
Nod32Eset–11840 (including)–11840 (including)
Nod32Eset–11841 (including)–11841 (including)
Nod32Eset–11842 (including)–11842 (including)
Nod32Eset–11843 (including)–11843 (including)
Nod32Eset–11844 (including)–11844 (including)
Nod32Eset–11845 (including)–11845 (including)
Nod32Eset–11846 (including)–11846 (including)
Nod32Eset–11847 (including)–11847 (including)
Nod32Eset–11848 (including)–11848 (including)
Nod32Eset–11849 (including)–11849 (including)
Nod32Eset–11850 (including)–11850 (including)
Nod32Eset–11851 (including)–11851 (including)
Nod32Eset–11852 (including)–11852 (including)
Nod32Eset–11853 (including)–11853 (including)
Nod32Eset–11854 (including)–11854 (including)
Nod32Eset–11855 (including)–11855 (including)
Nod32Eset–11856 (including)–11856 (including)
Nod32Eset–11857 (including)–11857 (including)
Nod32Eset–11858 (including)–11858 (including)
Nod32Eset–11859 (including)–11859 (including)
Nod32Eset–11860 (including)–11860 (including)

Potential Mitigations

  • Use a language that does not allow this weakness to occur or provides constructs that make this weakness easier to avoid.

  • For example, many languages that perform their own memory management, such as Java and Perl, are not subject to buffer overflows. Other languages, such as Ada and C#, typically provide overflow protection, but the protection can be disabled by the programmer.

  • Be wary that a language’s interface to native code may still be subject to overflows, even if the language itself is theoretically safe.

  • Use a vetted library or framework that does not allow this weakness to occur or provides constructs that make this weakness easier to avoid.

  • Examples include the Safe C String Library (SafeStr) by Messier and Viega [REF-57], and the Strsafe.h library from Microsoft [REF-56]. These libraries provide safer versions of overflow-prone string-handling functions.

  • Use automatic buffer overflow detection mechanisms that are offered by certain compilers or compiler extensions. Examples include: the Microsoft Visual Studio /GS flag, Fedora/Red Hat FORTIFY_SOURCE GCC flag, StackGuard, and ProPolice, which provide various mechanisms including canary-based detection and range/index checking.

  • D3-SFCV (Stack Frame Canary Validation) from D3FEND [REF-1334] discusses canary-based detection in detail.

  • Consider adhering to the following rules when allocating and managing an application’s memory:

  • Run or compile the software using features or extensions that randomly arrange the positions of a program’s executable and libraries in memory. Because this makes the addresses unpredictable, it can prevent an attacker from reliably jumping to exploitable code.

  • Examples include Address Space Layout Randomization (ASLR) [REF-58] [REF-60] and Position-Independent Executables (PIE) [REF-64]. Imported modules may be similarly realigned if their default memory addresses conflict with other modules, in a process known as “rebasing” (for Windows) and “prelinking” (for Linux) [REF-1332] using randomly generated addresses. ASLR for libraries cannot be used in conjunction with prelink since it would require relocating the libraries at run-time, defeating the whole purpose of prelinking.

  • For more information on these techniques see D3-SAOR (Segment Address Offset Randomization) from D3FEND [REF-1335].

  • Use a CPU and operating system that offers Data Execution Protection (using hardware NX or XD bits) or the equivalent techniques that simulate this feature in software, such as PaX [REF-60] [REF-61]. These techniques ensure that any instruction executed is exclusively at a memory address that is part of the code segment.

  • For more information on these techniques see D3-PSEP (Process Segment Execution Prevention) from D3FEND [REF-1336].

References