eScan < 9.0.718.1 MicroWorld Agent service (MWAGENT.EXE) Command Decryption Overflow
Critical Nessus Plugin ID 25296
SynopsisThe remote service is affected by a buffer overflow vulnerability.
DescriptionAccording to its version number, the installation of eScan on the remote host includes a service, the MicroWorld Agent service, for remote administration that fails to properly handle overly-long commands. A remote attacker can leverage this issue to crash the service or even execute arbitrary code.
Since the service operates with LocalSystem privileges, successful exploitation could lead to a complete compromise of the affected host.
SolutionUpgrade to eScan version 9.0.718.1 or later as that reportedly resolves the issue.