Back to Database
Status published
Medium
CVE-2025-1367
MicroWord eScan Antivirus USB Password sprintf buffer overflow
Vulnerability Description
A vulnerability was found in MicroWord eScan Antivirus 7.0.32 on Linux. It has been classified as critical. This affects the function sprintf of the component USB Password Handler. The manipulation leads to buffer overflow. An attack has to be approached locally. The vendor was contacted early about this disclosure but did not respond in any way.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-1367
Credits & Attribution
No credits recorded in the NVD database.
References
More from MicroWord
View All →CVE-2025-1369
MicroWord eScan Antivirus USB Password os command injection
Low
2
CVE-2025-1368
MicroWord eScan Antivirus mwav.conf ReadConfiguration buffer overflow
Medium
4.6
CVE-2025-1366
MicroWord eScan Antivirus VirusPopUp strcpy stack-based overflow
Medium
4.8
CVE-2025-1364
MicroWord eScan Antivirus USB Protection Service passPrompt stack-based overflow
Medium
4.8
Affected Vendor
MicroWord
View all reports →Affected Software
eScan Antivirus
Vulnerable Versions:
7.0.32
Timeline
Official Publish:
February 17th, 2025
Last Modified:
February 18th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L