CVE-2007-3971: eset_software nod32_antivirus

EPSS trend

Probability

3.17%

Chance of exploitation in the next 30 days

Percentile

88%

Versus all other CVEs

30-day change

0.00 pp

From 3.17% on 18-09-2026

18-09-202618-10-2026

EPSS score

3.17%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown

References

11 links

securityreason.com/securityalert/2923Third Party AdvisoryX Refsource SREASON
www.securityfocus.com/archive/1/474245/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/26124Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/35525VDB EntryX Refsource XF
www.eset.com/joomla/index.php?option=com_content&task=view&id=3469&Itemid=26X Refsource CONFIRMPatch
www.nruns.com/%5Bn.runs-SA-2007.017%5D%20-%20NOD32%20Antivirus%20ASPACK%20parsing%20Infinite%20Loop%20Advisory.pdfX Refsource MISC
www.securityfocus.com/bid/24988VDB EntryX Refsource BIDExploit
osvdb.org/37977VDB EntryX Refsource OSVDB
www.nruns.com/%5Bn.runs-SA-2007.017%5D%20-%20NOD32%20Antivirus%20ASPACK%20parsing%20Infinite%20Loop%20Advisory.txtX Refsource MISC
www.securitytracker.com/id?1018436VDB EntryX Refsource SECTRACK

Show all 11 references

www.vupen.com/english/advisories/2007/2602VDB EntryX Refsource VUPEN

Related vulnerabilities

CVE-2003-0062eset_softwarenod32_antivirus0.69%22y ago01-09-2004 04:00Buffer overflow in Eset Software NOD32 for UNIX before 1.013 allows local users to execute arbitrary code via a long path name.CVE-2007-2852eset_softwarenod32_antivirus6.53%19y ago24-05-2007 19:00Multiple stack-based buffer overflows in ESET NOD32 Antivirus before 2.70.37.0 allow remote attackers to execute arbitrary code during (1) delete/disinfect or (2) rename operations via a crafted directory name.CVE-2007-3972eset_softwarenod32_antivirus3.17%19y ago25-07-2007 17:00ESET NOD32 Antivirus before 2.2289 allows remote attackers to cause a denial of service via a crafted (1) ASPACK or (2) FSG packed file, which triggers a divide-by-zero error.CVE-2005-2903eset_softwarenod32_antivirus3.85%21y ago14-09-2005 04:00Heap-based buffer overflow in NOD32 2.5 with nod32.002 1.033 build 1127, with active scanning enabled, allows remote attackers to execute arbitrary code via an ARJ archive containing a file with a long filename.CVE-2004-1096broadcombrightstor_arcserve_backup+2218.96%21y ago01-12-2004 05:00Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.CVE-2004-0933archive_ziparchive_zip+2220.85%21y ago19-11-2004 05:00Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, EZ-Armor 2.0 through 2.4, and EZ-Antivirus 6.1 through 6.3 allow remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

All vulnerabilities innod32_antivirus

CVE-2007-3971: eset_software nod32_antivirus

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References