CVE-2025-0720

CVSS 3.1 Score 3.3 of 10 (low)

Details

Published Jan 26, 2025
CWE ID 119
CWE ID 121

Summary

CVE-2025-0720 is a newly disclosed vulnerability affecting Microworld eScan Antivirus 7.0.32 on Linux systems. This issue is considered problematic and impacts the Folder Watch List Handler's function removeExtraSlashes within the /opt/MicroWorld/sbin/rtscanner file. The manipulation of this function results in a stack-based buffer overflow, which can be exploited locally. The exploit for this vulnerability has been made public, increasing the concern for potential attacks. Despite early disclosure to the vendor, they have yet to respond or provide a patch.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share