CVE-2007-0445: kaspersky_lab kaspersky_anti-virus

EPSS trend

Probability

8.88%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

0.00 pp

From 8.88% on 18-09-2026

18-09-202618-10-2026

EPSS score

8.88%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

10 links

www.zerodayinitiative.com/advisories/ZDI-07-013.htmlX Refsource MISCVendor Advisory
secunia.com/advisories/24778Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.securitytracker.com/id?1017882VDB EntryX Refsource SECTRACK
www.kaspersky.com/technews?id=203038694X Refsource CONFIRMPatch
www.vupen.com/english/advisories/2007/1268VDB EntryX Refsource VUPEN
www.securityfocus.com/archive/1/464878/100/0/threadedMailing ListX Refsource BUGTRAQ
exchange.xforce.ibmcloud.com/vulnerabilities/33489VDB EntryX Refsource XF
www.securityfocus.com/bid/23346VDB EntryX Refsource BID
www.kaspersky.com/technews?id=203038693X Refsource CONFIRMPatch
www.securitytracker.com/id?1017883VDB EntryX Refsource SECTRACK

Related vulnerabilities

CVE-2003-1443kaspersky_labkaspersky_anti-virus0.48%19y ago23-10-2007 01:00Kaspersky Antivirus (KAV) 4.0.9.0 does not detect viruses in files with MS-DOS device names in their filenames, which allows local users to bypass virus protection, as demonstrated using aux.vbs and aux.com.CVE-2003-1444kaspersky_labkaspersky_anti-virus0.40%19y ago23-10-2007 01:00Kaspersky Antivirus (KAV) 4.0.9.0 allows local users to cause a denial of service (CPU consumption or crash) and prevent malicious code from being detected via a file with a long pathname.CVE-2007-1880kaspersky_labkaspersky_anti-virus+10.42%19y ago06-04-2007 00:00Integer overflow in the _NtSetValueKey function in klif.sys in Kaspersky Anti-Virus, Anti-Virus for Workstations, Anti-Virus for File Server 6.0, and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows context-dependent attackers to execute arbitrary code via a large, unsigned "data size argument," which results in a heap overflow.CVE-2007-1112kaspersky_labkaspersky_anti-virus+14.88%19y ago06-04-2007 00:00Kaspersky Anti-Virus 6.0 and Internet Security 6.0 exposes unsafe methods in the (a) AXKLPROD60Lib.KAV60Info (AxKLProd60.dll) and (b) AXKLSYSINFOLib.SysInfo (AxKLSysInfo.dll) ActiveX controls, which allows remote attackers to "download" or delete arbitrary files via crafted arguments to the (1) DeleteFile, (2) StartBatchUploading, (3) StartStrBatchUploading, or (4) StartUploading methods.CVE-2007-1879kaspersky_labkaspersky_anti-virus+13.28%19y ago06-04-2007 00:00The StartUploading function in KL.SysInfo ActiveX control (AxKLSysInfo.dll) in Kaspersky Anti-Virus 6.0 and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows remote attackers to read arbitrary files by triggering an outbound anonymous FTP session that invokes the PUT command. NOTE: this issue might be related to CVE-2007-1112.CVE-2007-1881kaspersky_labkaspersky_anti-virus+10.67%19y ago06-04-2007 00:00Unspecified vulnerability in KLIF (klif.sys) in Kaspersky Anti-Virus, Anti-Virus for Workstations, and Anti-Virus for File Servers 6.0, and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows local users to gain Ring-0 privileges via unspecified vectors.

All vulnerabilities inkaspersky_anti-virus kaspersky_internet_security

CVE-2007-0445: kaspersky_lab kaspersky_anti-virus

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References