Lucene search

[email protected]CVE-2005-3142

HistoryOct 05, 2005 - 9:02 p.m.

CVE-2005-3142

2005-10-0521:02:00

[email protected]

web.nvd.nist.gov

kaspersky

antivirus

security

buffer overflow

cve-2005-3142

nvd

8.1 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.175 Low

EPSS

Percentile

96.1%

JSON

Heap-based buffer overflow in Kaspersky Antivirus (KAV) 5.0 and Kaspersky Personal Security Suite 1.1 allows remote attackers to execute arbitrary code via a CAB file with large records after the header.

Affected configurations

NVD

Node

kaspersky_labkaspersky_anti-virusMatch5.0windows_file_servers

kaspersky_labkaspersky_anti-virusMatch5.0windows_workstations

kaspersky_labkaspersky_anti-virus_personalMatch5.0

kaspersky_labkaspersky_anti-virus_personal_proMatch5.0

kaspersky_labkaspersky_personal_security_suiteMatch1.1

CPENameOperatorVersion
kaspersky_lab:kaspersky_anti-viruskaspersky lab kaspersky anti-viruseq5.0
kaspersky_lab:kaspersky_anti-virus_personalkaspersky lab kaspersky anti-virus personaleq5.0
kaspersky_lab:kaspersky_anti-virus_personal_prokaspersky lab kaspersky anti-virus personal proeq5.0
kaspersky_lab:kaspersky_personal_security_suitekaspersky lab kaspersky personal security suiteeq1.1

CPE	Name	Operator	Version
kaspersky_lab:kaspersky_anti-virus	kaspersky lab kaspersky anti-virus	eq	5.0
kaspersky_lab:kaspersky_anti-virus_personal	kaspersky lab kaspersky anti-virus personal	eq	5.0
kaspersky_lab:kaspersky_anti-virus_personal_pro	kaspersky lab kaspersky anti-virus personal pro	eq	5.0
kaspersky_lab:kaspersky_personal_security_suite	kaspersky lab kaspersky personal security suite	eq	1.1

References

archives.neohapsis.com/archives/fulldisclosure/2005-10/0018.html

marc.info/?l=bugtraq&m=112837961522571&w=2

secunia.com/advisories/17024/

securityreason.com/securityalert/44

securitytracker.com/id?1014998

www.kaspersky.com/news?id=171512144

www.osvdb.org/19850

www.rem0te.com/public/images/kaspersky.pdf

www.securityfocus.com/bid/14998

www.vupen.com/english/advisories/2005/1934

exchange.xforce.ibmcloud.com/vulnerabilities/22497

8.1 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.175 Low

EPSS

Percentile

96.1%

JSON

Related for CVE-2005-3142

nvd1 checkpoint_advisories1 cvelist1