The vulnerability of the modules related to antivirus protection software, such as Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Small Office Security, Kaspersky Security Cloud, and Kaspersky Endpoint Security, is related to vulnerabilities in access control. These vulnerabilities allow attackers to trigger an emergency shutdown of the Microsoft Windows operating system.

The vulnerability of Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Small Office Security, Kaspersky Security Cloud, and Kaspersky Endpoint Security modules is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to...

PT-2022-2063

Name of the Vulnerable Software and Affected Versions Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security versions prior to 12 March 2022 Kaspersky Internet Security versions prior to 12 March 2022 Kaspersky Total Security versions prior to 12 March 2022 Kaspersky Small Office...

PT-2022-2062

Name of the Vulnerable Software and Affected Versions Kaspersky Anti-Virus affected versions not specified Kaspersky Internet Security affected versions not specified Kaspersky Total Security affected versions not specified Kaspersky Small Office Security affected versions not specified Kaspersky...

PT-2021-5108

Name of the Vulnerable Software and Affected Versions Kaspersky Anti-Virus affected versions not specified Kaspersky Internet Security affected versions not specified Kaspersky Total Security affected versions not specified Kaspersky Small Office Security affected versions not specified Kaspersky...

PT-2021-2525

Name of the Vulnerable Software and Affected Versions Kaspersky Anti-Virus affected versions not specified Kaspersky Internet Security affected versions not specified Kaspersky Total Security affected versions not specified Kaspersky Small Office Security affected versions not specified Kaspersky...

PT-2021-2524

Name of the Vulnerable Software and Affected Versions Kaspersky Anti-Virus affected versions not specified Kaspersky Internet Security affected versions not specified Kaspersky Total Security affected versions not specified Kaspersky Small Office Security affected versions not specified Kaspersky...

PT-2021-2523

Name of the Vulnerable Software and Affected Versions Kaspersky Anti-Virus affected versions not specified Kaspersky Internet Security affected versions not specified Kaspersky Total Security affected versions not specified Kaspersky Small Office Security affected versions not specified Kaspersky...

PT-2021-2526

Name of the Vulnerable Software and Affected Versions: Kaspersky Anti-Virus affected versions not specified Kaspersky Internet Security affected versions not specified Kaspersky Total Security affected versions not specified Kaspersky Small Office Security affected versions not specified Kaspersk...

PT-2021-2662

Name of the Vulnerable Software and Affected Versions: Kaspersky Anti-Virus affected versions not specified Kaspersky Internet Security affected versions not specified Kaspersky Total Security affected versions not specified Kaspersky Security Cloud affected versions not specified Kaspersky Small...

PT-2020-2395

Name of the Vulnerable Software and Affected Versions Kaspersky Anti-Virus affected versions not specified Kaspersky Internet Security affected versions not specified Kaspersky Total Security affected versions not specified Kaspersky Free affected versions not specified Kaspersky Security Cloud...

CVE-2019-15688: URL Redirection to Untrusted Site

Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection component did not adequately inform the user about the threat of redirecting to an untrusted site. Bypas...

CVE-2019-15687: Undefined Security Weakness

Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection component was vulnerable to remote disclosure of various information about the user's system like Window...

PT-2019-4506

Name of the Vulnerable Software and Affected Versions Kaspersky Anti-Virus versions up to 2020 Kaspersky Internet Security versions up to 2020 Kaspersky Total Security versions up to 2020 Kaspersky Free Anti-Virus versions up to 2020 Kaspersky Small Office Security versions up to 2020 Kaspersky...

PT-2019-4504

Name of the Vulnerable Software and Affected Versions Kaspersky Anti-Virus versions up to 2020 Kaspersky Internet Security versions up to 2020 Kaspersky Total Security versions up to 2020 Kaspersky Free Anti-Virus versions up to 2020 Kaspersky Small Office Security versions up to 2020 Kaspersky...

PT-2019-4503

Name of the Vulnerable Software and Affected Versions Kaspersky Anti-Virus versions up to 2020 Kaspersky Internet Security versions up to 2020 Kaspersky Total Security versions up to 2020 Kaspersky Free Anti-Virus versions up to 2020 Kaspersky Small Office Security versions up to 2020 Kaspersky...

PT-2019-4505

Name of the Vulnerable Software and Affected Versions Kaspersky Anti-Virus versions up to 2020 Kaspersky Internet Security versions up to 2020 Kaspersky Total Security versions up to 2020 Kaspersky Free Anti-Virus versions up to 2020 Kaspersky Small Office Security versions up to 2020 Kaspersky...

PT-2019-2803

Name of the Vulnerable Software and Affected Versions Kaspersky Anti-Virus versions up to 2019 Kaspersky Internet Security versions up to 2019 Kaspersky Total Security versions up to 2019 Kaspersky Free Anti-Virus affected versions not specified Kaspersky Small Office Security affected versions n...

[SYSS-2015-003] Kaspersky Small Office Security - Authentication Bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-003 Product: Kaspersky Small Office Security KSOS Vendor: Kaspersky Lab ZAO Affected Versions: 13.0.4.233 Tested Versions: 13.0.4.233 Vulnerability Type: Authentication Bypass Using an Alternate Path or Channel CWE-288 Risk...

[SYSS-2015-004] Kaspersky Small Office Security - Use of One-Way Hash withouth a Salt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-004 Product: Kaspersky Small Office Security KSOS Vendor: Kaspersky Lab ZAO Affected Versions: 13.0.4.233 Tested Versions: 13.0.4.233 Vulnerability Type: Use of a One-Way Hash without a Salt CWE-759 Risk Level: Low Solution...

Kaspersky Small Office Security 13.0.4.233 Unsalted Hash Vulnerability

The SySS GmbH found out that the administrator password for protecting different functions of the Kaspersky Small Office Security software, like managing backups or stopping protection services, is stored as raw, unsalted MD5 hash value in the Windows registry. Product: Kaspersky Small Office...