Vulnerability Spotlight: Vulnerability in Alyac antivirus program could stop virus scanning, cause denial of service
Summary: Jaewon Min of Cisco Talos discovered an out-of-bounds read vulnerability, TALOS-2022-1452 (CVE-2022-21147), in ESTsecurity Corp.'s Alyac antivirus software for Microsoft Windows that can crash the scanning process and cause a denial-of-service condition. Talos confirmed version 2.5.7.7 is affected, worked with ESTsecurity on an update, and published Snort rules 59014 and 59015 to detect exploitation attempts.
Bottom line: An attacker who can crash the antivirus scan removes the malware detection an organization is counting on, and the affected version named here is 2.5.7.7 - so any endpoint still running it is scanning nothing.
Read the original at Cisco Talos ↗
- Topics
- Endpoint & Network Security
- Mentions
- CVE-2022-21147
- Related
- Vulnerability Spotlight: Vulnerabilities in Alyac antivirus program could stop virus scanning, cause code execution Cyber Risks ·Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026