CVE-2009-2966

2009-08-2517:00:00

mitre

www.cve.org

6.6 Medium

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

87.2%

JSON

avp.exe in Kaspersky Internet Security 9.0.0.459 and Anti-Virus 9.0.0.463 allows remote attackers to cause a denial of service (CPU consumption and network connectivity loss) via an HTTP URL request that contains a large number of dot “.” characters.

References

archives.neohapsis.com/archives/fulldisclosure/2009-08/0252.html

secunia.com/advisories/36405

securityreason.com/achievement_securityalert/66

www.h-online.com/security/Kaspersky-confirm-and-close-DoS-vulnerability--/news/114077

www.osvdb.org/57173

www.securityfocus.com/bid/36084

www.securitytracker.com/id?1022754

www.securitytracker.com/id?1022755

exchange.xforce.ibmcloud.com/vulnerabilities/52571