← Vulnerability feed

Vulnerability record · CVE-2007-3971 · published 25 July 2007

CVE-2007-3971: Eset software nod32 antivirus vulnerability

Eset Software · Nod32 Antivirus

Integer overflow in ESET NOD32 Antivirus before 2.2289 allows remote attackers to cause a denial of service (CPU and disk consumption) via a crafted ASPACK packed file, which triggers an infinite loop.

5.0 CVSS 2.0 Medium EPSS 3.2% · top 12.3%
5.0CVSS 2.0 base score
3.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
22References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

Integer overflow in ESET NOD32 Antivirus before 2.2289 allows remote attackers to cause a denial of service (CPU and disk consumption) via a crafted ASPACK packed file, which triggers an infinite loop.

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://osvdb.org/37977
http://secunia.com/advisories/26124 PatchVendor Advisory
http://securityreason.com/securityalert/2923
http://www.eset.com/joomla/index.php?option=com_content&task=view&id=3469&Itemid=26 Patch
http://www.nruns.com/%5Bn.runs-SA-2007.017%5D%20-%20NOD32%20Antivirus%20ASPACK%20parsing%20Infinite%20Loop%20Advisory.pd
http://www.nruns.com/%5Bn.runs-SA-2007.017%5D%20-%20NOD32%20Antivirus%20ASPACK%20parsing%20Infinite%20Loop%20Advisory.tx
http://www.securityfocus.com/archive/1/474245/100/0/threaded
http://www.securityfocus.com/bid/24988 Exploit
http://www.securitytracker.com/id?1018436
http://www.vupen.com/english/advisories/2007/2602
https://exchange.xforce.ibmcloud.com/vulnerabilities/35525
http://osvdb.org/37977
http://secunia.com/advisories/26124 PatchVendor Advisory
http://securityreason.com/securityalert/2923
http://www.eset.com/joomla/index.php?option=com_content&task=view&id=3469&Itemid=26 Patch
http://www.nruns.com/%5Bn.runs-SA-2007.017%5D%20-%20NOD32%20Antivirus%20ASPACK%20parsing%20Infinite%20Loop%20Advisory.pd
http://www.nruns.com/%5Bn.runs-SA-2007.017%5D%20-%20NOD32%20Antivirus%20ASPACK%20parsing%20Infinite%20Loop%20Advisory.tx
http://www.securityfocus.com/archive/1/474245/100/0/threaded
http://www.securityfocus.com/bid/24988 Exploit
http://www.securitytracker.com/id?1018436
http://www.vupen.com/english/advisories/2007/2602
https://exchange.xforce.ibmcloud.com/vulnerabilities/35525

Track CVE-2007-3971 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2007-2852Eset software nod32 antivirus vulnerabilityMultiple stack-based buffer overflows in ESET NOD32 Antivirus before 2.70.37.0 allow remote attackers to execute arbitrary code during (1) delete/dis…EPSS 6.5%9.3CVE-2006-6676Eset software nod32 antivirus vulnerabilityInteger overflow in the (a) OLE2 and (b) CHM parsers for ESET NOD32 Antivirus before 1.1743 allows remote attackers to execute arbitrary code via a c…EPSS 5.8%7.5CVE-2005-2903Eset software nod32 antivirus vulnerabilityHeap-based buffer overflow in NOD32 2.5 with nod32.002 1.033 build 1127, with active scanning enabled, allows remote attackers to execute arbitrary c…EPSS 3.9%7.5CVE-2004-0937Archive zip vulnerabilitySophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirus protecti…EPSS 15%7.5CVE-2004-0932McAfee Anti-Virus Engine DATS driver bypass via malformed compressed fileThe McAfee Anti-Virus Engine DATS drivers before 4398 (Oct 13 2004) and DATS Driver before 4397 (Oct 6 2004) fail to properly handle compressed files…EPSS 64%analysed7.5CVE-2004-0935Archive zip vulnerabilityEset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compressed file with both local and g…EPSS 15%7.5CVE-2004-0933Archive zip vulnerabilityComputer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content M…EPSS 21%7.5CVE-2004-0936Archive zip vulnerabilityRAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does…EPSS 15%

Source: NIST National Vulnerability Database (record CVE-2007-3971), CISA KEV, FIRST EPSS (scores of 2026-10-12). This page is refreshed as NVD updates the record.