CA Vet Scan Engine < 11.9.1 Library Remote Heap Overflow

Critical Nessus Plugin ID 20174


The remote antivirus application allows execution of arbitrary code.


The remote host is running a version of CA Vet Scan Engine that is vulnerable to heap overflow. An attacker may exploit this flaw to execute arbitrary code on the remote host with the privileges of a local administrator or to disable the remote service remotely.

To exploit this flaw, an attacker would need to send a specially- crafted file to the remote antivirus library.


Install the latest virus definitions and ensure that the Vet engine is version 11.9.1 or later.

See Also

Plugin Details

Severity: Critical

ID: 20174

File Name: ca_vet_overflow.nasl

Version: $Revision: 1.16 $

Type: local

Agent: windows

Family: Windows

Published: 2005/11/09

Modified: 2017/05/02

Dependencies: 13855

Risk Information

Risk Factor: Critical


Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Vulnerability Information

Required KB Items: SMB/Registry/Enumerated

Exploit Available: false

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 2005/05/23

Reference Information

CVE: CVE-2005-1693

BID: 13710

OSVDB: 16780