Microword eScan Antivirus Stack-Based Buffer Overflow Vulnerability

A stack-based buffer overflow vulnerability has been identified in Microword eScan Antivirus version 7.0.32 for Linux. The issue resides in the 'removeExtraSlashes' function of the 'rtscanner' file, which is part of the Folder Watch List Handler component. This vulnerability allows for local exploitation, as the 'rtscanner' binary runs as a system service and can be manipulated by unprivileged users. The vulnerability disrupts the application's real-time protection by overwriting the stack with excessive data, potentially leading to arbitrary code execution.

Impact

Exploitation of this vulnerability causes a stack-based buffer overflow, which can be leveraged to execute arbitrary code by overwriting the return address on the stack.

Reproduction

To reproduce this vulnerability, create a folder with a very long name (up to 254 characters) within the '/tmp/' or '/home/' directories. The 'rtscanner' service will then be disrupted, as it fails to handle the excessive path length, causing the real-time protection feature of eScan Antivirus to be temporarily disabled.