MicroWorld eScan Antivirus Command Injection Vulnerability in Quarantine Handler

Vulnerability

A critical command injection vulnerability has been identified in MicroWorld eScan Antivirus version 7.0.32 for Linux. The issue arises from an unknown processing flaw in the rtscanner file within the Quarantine Handler component, allowing remote OS command injection. Exploitation of this vulnerability is considered difficult and has been publicly disclosed.

Impact

Exploitation of this vulnerability allows for remote command execution on the affected system.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
4.2
impact
10.0
exploitability
6.0
remediation
0.0
relevance
0.0
threat
6.4
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.