CVE-2007-3970

Severity: high (CVSS 7.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-07-25 · updated 2026-06-16
Weakness: CWE-362

Description

Race condition in ESET NOD32 Antivirus before 2.2289 allows remote attackers to execute arbitrary code via a crafted CAB file, which triggers heap corruption.

Affected products

ESET Nod32 Antivirus: before 2.2289 — fixed in 2.2289

How to fix

Upgrade to a fixed version: ESET Nod32 Antivirus 2.2289. Check the vendor advisory for mitigations.

References

http://osvdb.org/37976
http://secunia.com/advisories/26124
http://securityreason.com/securityalert/2922
http://www.eset.com/joomla/index.php?option=com_content&task=view&id=3469&Itemid=26
http://www.nruns.com/%5Bn.runs-SA-2007.016%5D%20-%20NOD32%20Antivirus%20CAB%20parsing%20Arbitrary%20Code%20Execution%20Advisory.pdf
http://www.nruns.com/%5Bn.runs-SA-2007.016%5D%20-%20NOD32%20Antivirus%20CAB%20parsing%20Arbitrary%20Code%20Execution%20Advisory.txt
http://www.securityfocus.com/archive/1/474244/100/0/threaded
http://www.securityfocus.com/bid/24988
http://www.vupen.com/english/advisories/2007/2602
https://exchange.xforce.ibmcloud.com/vulnerabilities/35526
http://osvdb.org/37976
http://secunia.com/advisories/26124

Get alerted when CVE-2007-3970 or the next vulnerability affects your stack