Kaspersky Lab vulnerabilities, page 4
74 vulnerabilities
Known vulnerabilities in Kaspersky Lab products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 24 products.
HighCVE-2019-8277kaspersky lab · ultravnc +4 morekaspersky lab ultravncUltraVNC revision 1211 contains multiple memory leaks (CWE-665) in VNC server code, which allows an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212.EPSS2.97%HighCVE-2019-8267kaspersky lab · ultravnc +1 morekaspersky lab ultravncUltraVNC revision 1207 has out-of-bounds read vulnerability in VNC client code inside TextChat module, which results in a denial of service (DoS) condition. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1208.EPSS1.95%CriticalCVE-2019-8264kaspersky lab · ultravnc +1 morekaspersky lab ultravncUltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside Ultra2 decoder, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1204.EPSS3.13%CriticalCVE-2019-8273kaspersky lab · ultravnc +4 morekaspersky lab ultravncUltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer request handler, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212.EPSS8.26%CriticalCVE-2019-8272kaspersky lab · ultravnc +4 morekaspersky lab ultravncUltraVNC revision 1211 has multiple off-by-one vulnerabilities in VNC server code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212.EPSS3.92%MediumCVE-2019-8279kaspersky lab · vanilla forums +1 morekaspersky lab vanilla forumsMultiple stored XSS in Vanilla Forums before 2.5 allow remote attackers to inject arbitrary JavaScript code into any message on forum.EPSS0.81%CriticalCVE-2019-8280kaspersky lab · ultravnc +1 morekaspersky lab ultravncUltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially result code execution. This attack appear to be exploitable via network connectivity. This vulnerability has been fixed in revision 1204.EPSS4.25%HighCVE-2019-8276kaspersky lab · ultravnc +4 morekaspersky lab ultravncUltraVNC revision 1211 has a stack buffer overflow vulnerability in VNC server code inside file transfer request handler, which can result in Denial of Service (DoS). This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212.EPSS5.72%CriticalCVE-2019-8274kaspersky lab · ultravnc +4 morekaspersky lab ultravncUltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer offer handler, which can potentially in result code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212.EPSS8.26%MediumCVE-2019-8278invisioncommunity · invision_power_board +1 moreinvisioncommunity invision_power_boardStored XSS in Invision Power Board versions 3.3.1 - 3.4.8 leads to Remote Code Execution.EPSS1.89%HighCVE-2006-1091kaspersky_lab · kaspersky_anti-viruskaspersky_lab kaspersky_anti-virusKaspersky Antivirus 5.0.5 and 5.5.3 allows remote attackers to cause a denial of service (CPU and memory consumption) via unknown attack vectors.EPSS2.86%HighCVE-2006-4926kaspersky_lab · kaspersky_anti-virus +3 morekaspersky_lab kaspersky_anti-virusThe NDIS-TDI Hooking Engine, as used in the (1) KLICK (KLICK.SYS) and (2) KLIN (KLIN.SYS) device drivers 2.0.0.281 for in Kaspersky Labs Anti-Virus 6.0.0.303 and other Anti-Virus and Internet Security products, allows local users to execute arbitrary code via crafted Irp structure with invalid addresses in the 0x80052110 IOCTL.EPSS1.27%MediumCVE-2006-4265kaspersky_lab · kaspersky_anti-hackerkaspersky_lab kaspersky_anti-hackerKaspersky Anti-Hacker 1.8.180, when Stealth Mode is enabled, allows remote attackers to obtain responses to ICMP (1) timestamp and (2) netmask requests, which is inconsistent with the documented behavior of Stealth Mode.EPSS1.18%MediumCVE-2006-6408kaspersky_lab · kaspersky_anti-viruskaspersky_lab kaspersky_anti-virusKaspersky Anti-Virus for Linux Mail Servers 5.5.10 allows remote attackers to bypass virus detection by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file.EPSS2.05%