eScan < 9.0.718.1 MicroWorld Agent service (MWAGENT.EXE) Command Decryption Overflow

Critical Nessus Plugin ID 25296


The remote service is affected by a buffer overflow vulnerability.


According to its version number, the installation of eScan on the remote host includes a service, the MicroWorld Agent service, for remote administration that fails to properly handle overly-long commands. A remote attacker can leverage this issue to crash the service or even execute arbitrary code.

Since the service operates with LocalSystem privileges, successful exploitation could lead to a complete compromise of the affected host.


Upgrade to eScan version 9.0.718.1 or later as that reportedly resolves the issue.

See Also

Plugin Details

Severity: Critical

ID: 25296

File Name: escan_9_0_718_1.nasl

Version: $Revision: 1.11 $

Type: remote

Agent: windows

Family: Windows

Published: 2007/05/24

Modified: 2011/03/21

Dependencies: 25295

Risk Information

Risk Factor: Critical


Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Vulnerability Information

Required KB Items: eScan/Version

Exploit Available: false

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 2007/05/23

Reference Information

CVE: CVE-2007-2687

BID: 24112

OSVDB: 36580