CVE-2025-0720: Microword eScan Antivirus Folder Watch List rtscanner removeExtraSlashes stack-based overflow
Description
A vulnerability was found in Microword eScan Antivirus 7.0.32 on Linux. It has been rated as problematic. Affected by this issue is the function removeExtraSlashes of the file /opt/MicroWorld/sbin/rtscanner of the component Folder Watch List Handler. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Eine problematische Schwachstelle wurde in Microword eScan Antivirus 7.0.32 für Linux ausgemacht. Davon betroffen ist die Funktion removeExtraSlashes der Datei /opt/MicroWorld/sbin/rtscanner der Komponente Folder Watch List Handler. Dank der Manipulation mit unbekannten Daten kann eine stack-based buffer overflow-Schwachstelle ausgenutzt werden. Der Angriff muss lokal passieren. Der Exploit steht zur öffentlichen Verfügung.
Classification
CVE ID: CVE-2025-0720
CVSS Base Severity: MEDIUM
CVSS Base Score: 4.8
Affected Products
Vendor: Microword
Product: eScan Antivirus
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.05% (probability of being exploited)
EPSS Percentile: 17.96% (scored less or equal to compared to others)
EPSS Date: 2025-02-24 (when was this score calculated)
References
https://vuldb.com/?id.293480https://vuldb.com/?ctiid.293480
https://vuldb.com/?submit.482371