CVE-2025-0797: MicroWorld eScan Antivirus Quarantine Microworld default permission
First published: Wed Jan 29 2025(Updated: )
A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been declared as problematic. This vulnerability affects unknown code of the file /var/Microworld/ of the component Quarantine Handler. The manipulation leads to incorrect default permissions. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| MicroWorld Technologies eScan |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-0797?
CVE-2025-0797 has been declared as problematic due to incorrect default permissions in the Quarantine Handler.
How do I fix CVE-2025-0797?
To fix CVE-2025-0797, review and adjust the file permissions in the /var/Microworld/ directory of your MicroWorld eScan Antivirus installation.
What systems are affected by CVE-2025-0797?
CVE-2025-0797 specifically affects MicroWorld eScan Antivirus version 7.0.32 on Linux systems.
What type of vulnerability is CVE-2025-0797?
CVE-2025-0797 is classified as a permissions-related vulnerability affecting the Quarantine Handler component.
Can CVE-2025-0797 lead to further exploits?
Yes, improper default permissions for CVE-2025-0797 could potentially allow unauthorized access or manipulation of quarantined files.
- collector/nvd-api
- source/NVD
- agent/references
- agent/weakness
- agent/title
- agent/type
- agent/description
- agent/first-publish-date
- agent/severity
- agent/author
- agent/source
- agent/event
- agent/tags
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/microworld
- canonical/microworld technologies escan