Vulnerabilità in Nod32 antivirus

[mausap]

Posto qui per maggiore visibilita' ed anche sul thread ufficiale.

Aggionare alla versione 2.70.39

http://maipiugromozon.blogspot.com/

[xcdegasp]

Description:
Ismael Briones has reported two vulnerabilities in Nod32 Antivirus, which potentially can be exploited by malicious users to gain escalated privileges, or by malicious people to compromise a vulnerable system.

The vulnerabilities are caused due to boundary errors when cleaning, deleting, or renaming files detected as malware. These can be exploited to cause stack-based buffer overflows via a specially crafted directory containing malware with an overly long directory or path name.

Successful exploitation may allow execution of arbitrary code.

The vulnerabilities are reported in versions prior to 2.70.37.

Solution:
Update to version 2.70.39.
http://www.eset.com/download/registered_software.php

fonte: http://secunia.com/advisories/25375/

[epa]

ho scaricato la 2.70.39 in ita ma la definizione virus è 2257 e mi da un problema al server. cosa faccio?

[wizard1993]

ho scaricato la 2.70.39 in ita ma la definizione virus è 2257 e mi da un problema al server. cosa faccio?

risposto di la