CVE-2006-4926: kaspersky_lab kaspersky_anti-virus

EPSS trend

Probability

1.27%

Chance of exploitation in the next 30 days

Percentile

69%

Versus all other CVEs

30-day change

0.00 pp

From 1.27% on 20-09-2026

20-09-202620-10-2026

EPSS score

1.27%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

4 found

referenceUnverified
Exploit Reference (osvdb.org)
Maturity: unknown
referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
referenceUnverified
Exploit Reference (securitytracker.com)
Maturity: unknown

Show all 4 exploits

exploit-databaselocalwindowsVerified
Kaspersky Internet Security 6.0.0.303 - IOCTL KLICK Local Overflow / Local Privilege Escalation
Maturity: weaponized

References

10 links

www.securityfocus.com/archive/1/449289/100/0/threadedMailing ListX Refsource BUGTRAQ
exchange.xforce.ibmcloud.com/vulnerabilities/29677VDB EntryX Refsource XF
www.osvdb.org/29891VDB EntryX Refsource OSVDBExploitPatch
www.securityfocus.com/archive/1/449301/100/0/threadedMailing ListX Refsource BUGTRAQ
www.kaspersky.com/technews?id=203038678X Refsource CONFIRMPatch
labs.idefense.com/intelligence/vulnerabilities/display.php?id=425Third Party AdvisoryX Refsource IDEFENSEPatchVendor Advisory
secunia.com/advisories/22478Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.securityfocus.com/bid/20635VDB EntryX Refsource BIDExploitPatch
securitytracker.com/id?1017093VDB EntryX Refsource SECTRACKExploitPatch
www.vupen.com/english/advisories/2006/4117VDB EntryX Refsource VUPEN

Related vulnerabilities

CVE-2003-1443kaspersky_labkaspersky_anti-virus0.48%19y ago23-10-2007 01:00Kaspersky Antivirus (KAV) 4.0.9.0 does not detect viruses in files with MS-DOS device names in their filenames, which allows local users to bypass virus protection, as demonstrated using aux.vbs and aux.com.CVE-2003-1444kaspersky_labkaspersky_anti-virus0.40%19y ago23-10-2007 01:00Kaspersky Antivirus (KAV) 4.0.9.0 allows local users to cause a denial of service (CPU consumption or crash) and prevent malicious code from being detected via a file with a long pathname.CVE-2007-1880kaspersky_labkaspersky_anti-virus+10.42%19y ago06-04-2007 00:00Integer overflow in the _NtSetValueKey function in klif.sys in Kaspersky Anti-Virus, Anti-Virus for Workstations, Anti-Virus for File Server 6.0, and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows context-dependent attackers to execute arbitrary code via a large, unsigned "data size argument," which results in a heap overflow.CVE-2007-1112kaspersky_labkaspersky_anti-virus+14.88%19y ago06-04-2007 00:00Kaspersky Anti-Virus 6.0 and Internet Security 6.0 exposes unsafe methods in the (a) AXKLPROD60Lib.KAV60Info (AxKLProd60.dll) and (b) AXKLSYSINFOLib.SysInfo (AxKLSysInfo.dll) ActiveX controls, which allows remote attackers to "download" or delete arbitrary files via crafted arguments to the (1) DeleteFile, (2) StartBatchUploading, (3) StartStrBatchUploading, or (4) StartUploading methods.CVE-2007-1879kaspersky_labkaspersky_anti-virus+13.28%19y ago06-04-2007 00:00The StartUploading function in KL.SysInfo ActiveX control (AxKLSysInfo.dll) in Kaspersky Anti-Virus 6.0 and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows remote attackers to read arbitrary files by triggering an outbound anonymous FTP session that invokes the PUT command. NOTE: this issue might be related to CVE-2007-1112.CVE-2007-1881kaspersky_labkaspersky_anti-virus+10.67%19y ago06-04-2007 00:00Unspecified vulnerability in KLIF (klif.sys) in Kaspersky Anti-Virus, Anti-Virus for Workstations, and Anti-Virus for File Servers 6.0, and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows local users to gain Ring-0 privileges via unspecified vectors.

All vulnerabilities inkaspersky_anti-virus kaspersky_anti-virus_personal kaspersky_anti-virus_personal_pro kaspersky_internet_security

CVE-2006-4926: kaspersky_lab kaspersky_anti-virus

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References