GCVE - cpe:2.3:a:microword:escan_antivirus:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microword:escan_antivirus:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Microword (`6033ff81-ebed-5113-88fe-e1b9b879fb50`)
Product	Escan Antivirus (`da38c974-4087-5166-b4c6-02c93c2b77fa`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-1369`	vulnerable	2026-06-08 07:08:36.660676	MicroWord eScan Antivirus USB Password os command injection MEDIUM (4.5) A vulnerability classified as critical was found in MicroWord eScan Antivirus 7.0.32 on Linux. Affected by this vulnerability is an unknown functionality of the component USB Password Handler. The manipulation leads to os command injection. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-02-17T01:31:04.446Z Updated: 2025-02-18T19:33:05.664Z Open on db.gcve.eu Reference links https://vuldb.com/?id.295975 https://vuldb.com/?ctiid.295975 https://vuldb.com/?submit.496482 https://github.com/dmknght/FIS_RnD/blob/main/escan_av_usb_protection_multiple_vulns.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-1368`	vulnerable	2026-06-08 07:08:36.660107	MicroWord eScan Antivirus mwav.conf ReadConfiguration buffer overflow LOW (2.3) A vulnerability was found in MicroWord eScan Antivirus 7.0.32 on Linux. It has been declared as problematic. This vulnerability affects the function ReadConfiguration of the file /opt/MicroWorld/etc/mwav.conf. The manipulation of the argument BasePath leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-02-17T01:00:11.214Z Updated: 2025-02-18T19:33:13.700Z Open on db.gcve.eu Reference links https://vuldb.com/?id.295972 https://vuldb.com/?ctiid.295972 https://github.com/dmknght/FIS_RnD/blob/main/escan_av_usb_protection_multiple_vulns.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-1367`	vulnerable	2026-06-08 07:08:36.659626	MicroWord eScan Antivirus USB Password sprintf buffer overflow MEDIUM (5.3) A vulnerability was found in MicroWord eScan Antivirus 7.0.32 on Linux. It has been classified as critical. This affects the function sprintf of the component USB Password Handler. The manipulation leads to buffer overflow. An attack has to be approached locally. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-02-17T00:31:03.915Z Updated: 2025-02-18T19:33:23.455Z Open on db.gcve.eu Reference links https://vuldb.com/?id.295971 https://vuldb.com/?ctiid.295971 https://github.com/dmknght/FIS_RnD/blob/main/escan_av_usb_protection_multiple_vulns.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-1366`	vulnerable	2026-06-08 07:08:36.659277	MicroWord eScan Antivirus VirusPopUp strcpy stack-based overflow MEDIUM (5.3) A vulnerability was found in MicroWord eScan Antivirus 7.0.32 on Linux and classified as critical. Affected by this issue is the function strcpy of the component VirusPopUp. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-02-17T00:00:16.054Z Updated: 2025-02-18T15:58:00.838Z Open on db.gcve.eu Reference links https://vuldb.com/?id.295970 https://vuldb.com/?ctiid.295970 https://github.com/dmknght/FIS_RnD/blob/main/escan_av_usb_protection_multiple_vulns.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-1364`	vulnerable	2026-06-08 07:08:36.657246	MicroWord eScan Antivirus USB Protection Service passPrompt stack-based overflow MEDIUM (5.3) A vulnerability has been found in MicroWord eScan Antivirus 7.0.32 on Linux and classified as critical. Affected by this vulnerability is the function passPrompt of the component USB Protection Service. The manipulation leads to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-02-16T23:00:14.667Z Updated: 2025-02-18T16:07:31.878Z Open on db.gcve.eu Reference links https://vuldb.com/?id.295969 https://vuldb.com/?ctiid.295969 https://vuldb.com/?submit.496481 https://github.com/dmknght/FIS_RnD/blob/main/escan_av_usb_protection_multiple_vulns.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-0720`	vulnerable	2026-06-08 07:02:25.247875	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Escan Antivirus

Notes

PURL mappings

Vulnerability references

Contribute