Vulnerabilities in ESTsoft Alyac antivirus program could stop virus scanning, cause code execution

guest · Aug 3, 2022

Vulnerability Spotlight: ESTsoft Alyac antivirus
August 3, 2022

Cisco Talos recently discovered out-of-bounds read and buffer overflow vulnerabilities in ESTsecurity Corp.’s Alyac antivirus software that could cause a denial-of-service condition or arbitrary code execution. Alyac is an antivirus software developed for Microsoft Windows machines.

TALOS-2022-1452 (CVE-2022-21147) is a vulnerability that exists in a specific Alyac module that, eventually, leads to a crash of Alyac’s scanning process, which effectively neutralizes the antivirus scan.
TALOS-2022-1527 (CVE-2022-32543) and TALOS-2022-1533 (CVE-2022-29886) are heap-based buffer overflow vulnerabilities that an attacker could exploit to execute arbitrary code on the targeted machine.
Click to expand...

Users are encouraged to update these affected products as soon as possible: ESTsoft Alyac, versions 2.5.7.7 and 2.5.8.544. Talos tested and confirmed ESTsoft Alyac, version 2.5.7.7, is affected by TALOS-2022-1452. Version 2.5.8.544 is vulnerable to TALOS-2022-1533 and TALOS-2022-1527.
Click to expand...

Update (Aug. 3, 2022): Talos disclosed two new vulnerabilities in the Alyac antivirus software and added their details to this post.
Click to expand...

roger_m · Aug 4, 2022

I'm still waiting for them to release the English language version of Alyac. They told me they would, but it seems doubtful.

Log in or Sign up

Vulnerabilities in ESTsoft Alyac antivirus program could stop virus scanning, cause code execution

guest Guest

roger_m Registered Member

Log in or Sign up

Vulnerabilities in ESTsoft Alyac antivirus program could stop virus scanning, cause code execution

guest Guest

roger_m Registered Member

Useful Searches