CVE-2007-3971: Eset Software NOD32 Antivirus

Medium severity, CVSS 5.0. EPSS: 3.2% chance of exploitation in the next 30 days.

Integer overflow in ESET NOD32 Antivirus before 2.2289 allows remote attackers to cause a denial of service (CPU and disk consumption) via a crafted ASPACK packed file, which triggers an infinite loop.

Affected products

• Eset Software NOD32 Antivirus: up to and including 2.2289

Published 2007-07-25. Last modified 2026-06-16.