ESET NOD32 Heap Overflow
Posted by deepcore on March 5, 2016 – 11:24 am
ESET NOD32 is affected by a heap overflow vulnerability while unpacking EPOC installation files. By creating a file record with type SIS_FILE_MULTILANG (meaning a different file is provided for every supported language), and then claiming to support a very large number of languages, a 16-bit calculation overflows. This leads to a nice clean heap overflow.
Post a reply
You must be logged in to post a comment.