CVE-2005-3142: kaspersky_lab kaspersky_anti-virus

EPSS trend

Probability

41.65%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 41.65% on 18-09-2026

18-09-202618-10-2026

EPSS score

41.65%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

11 links

www.vupen.com/english/advisories/2005/1934VDB EntryX Refsource VUPEN
marc.info?l=bugtraq&m=112837961522571&w=2Mailing ListX Refsource BUGTRAQ
securityreason.com/securityalert/44Third Party AdvisoryX Refsource SREASON
www.securityfocus.com/bid/14998VDB EntryX Refsource BID
secunia.com/advisories/17024/Third Party AdvisoryX Refsource SECUNIAVendor Advisory
archives.neohapsis.com/archives/fulldisclosure/2005-10/0018.htmlMailing ListX Refsource FULLDISC
www.osvdb.org/19850VDB EntryX Refsource OSVDB
securitytracker.com/id?1014998VDB EntryX Refsource SECTRACK
www.rem0te.com/public/images/kaspersky.pdfX Refsource MISCVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/22497VDB EntryX Refsource XF

Show all 11 references

www.kaspersky.com/news?id=171512144X Refsource CONFIRMVendor Advisory

Related vulnerabilities

CVE-2003-1443kaspersky_labkaspersky_anti-virus0.48%19y ago23-10-2007 01:00Kaspersky Antivirus (KAV) 4.0.9.0 does not detect viruses in files with MS-DOS device names in their filenames, which allows local users to bypass virus protection, as demonstrated using aux.vbs and aux.com.CVE-2003-1444kaspersky_labkaspersky_anti-virus0.40%19y ago23-10-2007 01:00Kaspersky Antivirus (KAV) 4.0.9.0 allows local users to cause a denial of service (CPU consumption or crash) and prevent malicious code from being detected via a file with a long pathname.CVE-2007-1880kaspersky_labkaspersky_anti-virus+10.42%19y ago06-04-2007 00:00Integer overflow in the _NtSetValueKey function in klif.sys in Kaspersky Anti-Virus, Anti-Virus for Workstations, Anti-Virus for File Server 6.0, and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows context-dependent attackers to execute arbitrary code via a large, unsigned "data size argument," which results in a heap overflow.CVE-2007-1112kaspersky_labkaspersky_anti-virus+14.88%19y ago06-04-2007 00:00Kaspersky Anti-Virus 6.0 and Internet Security 6.0 exposes unsafe methods in the (a) AXKLPROD60Lib.KAV60Info (AxKLProd60.dll) and (b) AXKLSYSINFOLib.SysInfo (AxKLSysInfo.dll) ActiveX controls, which allows remote attackers to "download" or delete arbitrary files via crafted arguments to the (1) DeleteFile, (2) StartBatchUploading, (3) StartStrBatchUploading, or (4) StartUploading methods.CVE-2007-1879kaspersky_labkaspersky_anti-virus+13.28%19y ago06-04-2007 00:00The StartUploading function in KL.SysInfo ActiveX control (AxKLSysInfo.dll) in Kaspersky Anti-Virus 6.0 and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows remote attackers to read arbitrary files by triggering an outbound anonymous FTP session that invokes the PUT command. NOTE: this issue might be related to CVE-2007-1112.CVE-2007-1881kaspersky_labkaspersky_anti-virus+10.67%19y ago06-04-2007 00:00Unspecified vulnerability in KLIF (klif.sys) in Kaspersky Anti-Virus, Anti-Virus for Workstations, and Anti-Virus for File Servers 6.0, and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows local users to gain Ring-0 privileges via unspecified vectors.

All vulnerabilities inkaspersky_anti-virus kaspersky_anti-virus_personal kaspersky_anti-virus_personal_pro kaspersky_personal_security_suite

CVE-2005-3142: kaspersky_lab kaspersky_anti-virus

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References