Kaspersky Lab Kaspersky Anti Virus vulnerabilities, page 2
26 vulnerabilities
Known vulnerabilities in Kaspersky Lab Kaspersky Anti Virus, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2004-0935archive_ziparchive_zip+22
EPSS score15.46%
Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.CVE-2009-0449kaspersky_labkaspersky_anti-virusEPSS score0.96%
Buffer overflow in klim5.sys in Kaspersky Anti-Virus for Workstations 6.0 and Anti-Virus 2008 allows local users to gain privileges via an IOCTL 0x80052110 call.CVE-2009-4452kaspersky_labkaspersky_anti-virus+6EPSS score0.82%
Kaspersky Anti-Virus 5.0 (5.0.712); Antivirus Personal 5.0.x; Anti-Virus 6.0 (6.0.3.837), 7 (7.0.1.325), 2009 (8.0.0.x), and 2010 (9.0.0.463); and Internet Security 7 (7.0.1.325), 2009 (8.0.0.x), and 2010 (9.0.0.463); use weak permissions (Everyone:Full Control) for the BASES directory, which allows local users to gain SYSTEM privileges by replacing an executable or DLL with a Trojan horse.CVE-2006-1091kaspersky_labkaspersky_anti-virusEPSS score2.86%
Kaspersky Antivirus 5.0.5 and 5.5.3 allows remote attackers to cause a denial of service (CPU and memory consumption) via unknown attack vectors.CVE-2006-4926kaspersky_labkaspersky_anti-virus+3EPSS score1.27%
The NDIS-TDI Hooking Engine, as used in the (1) KLICK (KLICK.SYS) and (2) KLIN (KLIN.SYS) device drivers 2.0.0.281 for in Kaspersky Labs Anti-Virus 6.0.0.303 and other Anti-Virus and Internet Security products, allows local users to execute arbitrary code via crafted Irp structure with invalid addresses in the 0x80052110 IOCTL.CVE-2006-6408kaspersky_labkaspersky_anti-virusEPSS score2.05%
Kaspersky Anti-Virus for Linux Mail Servers 5.5.10 allows remote attackers to bypass virus detection by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file.