CVE-2006-6676: Eset Software NOD32 Antivirus

High severity, CVSS 9.3. EPSS: 5.8% chance of exploitation in the next 30 days.

Integer overflow in the (a) OLE2 and (b) CHM parsers for ESET NOD32 Antivirus before 1.1743 allows remote attackers to execute arbitrary code via a crafted (1) .DOC or (2) .CAB file that triggers a heap-based buffer overflow.

Affected products

• Eset Software NOD32 Antivirus: up to and including 1.1742; version 1.0.11 only; version 1.0.12 only; version 1.0.13 only

Published 2006-12-21. Last modified 2026-06-16.