PT-2016-2644

Name of the Vulnerable Software and Affected Versions Kaspersky Total Security affected versions not specified Kaspersky Internet Security affected versions not specified Description The issue is related to multiple information leaks in the KLDISK driver of Kaspersky security products. These leak...

Kaspersky Total Security Version Detection

Detects the installed version of Kaspersky Total security on Windows. The script logs in via smb, searches for kaspersky in the registry, gets the kaspersky total security installation path from registry and fetches version. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might b...

Kaspersky Total Security Security Bypass Vulnerability

Kaspersky Total security is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

McAfee VirusScan Enterprise DEP Bypass

The vulnerability of McAfee VirusScan Enterprise, AVG InternetSecurity, and Kaspersky Total Security anti-virus tools is related to the allocation of memory with read, write, and execute permissions during the protection of user processes. Exploiting this vulnerability can allow a malicious actor...

Kaspersky Total Security Security Bypass Vulnerability

Kaspersky Total Security is a comprehensive multi-device version of the Russian antivirus program. The Kaspersky Total Security program protects user-mode processes by allocating memory with Read, Write, Execute RWX privileges in predictable addresses, allowing an attacker to exploit this...

CVE-2015-8579

Kaspersky Total Security 2015 15.0.2.361 allocates memory with Read, Write, Execute RWX permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors...

CVE-2015-8579

The CVE targets Kaspersky Total Security 2015 (version 15.0.2.361). The vulnerability arises from memory allocations that use Read, Write, Execute (RWX) permissions at predictable addresses while protecting user‑mode processes. This root cause enables bypass of DEP and ASLR protections. Details a...

CVE-2015-8579

Kaspersky Total Security 2015 15.0.2.361 allocates memory with Read, Write, Execute RWX permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors...

CVE-2015-8579: Undefined Security Weakness

Kaspersky Total Security 2015 15.0.2.361 allocates memory with Read, Write, Execute RWX permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors...

AVG, McAfee, Kaspersky antivirus there is a serious vulnerability, can be turned into hacker attack tools-a vulnerability warning-the black bar safety net

! enSilo of security experts in numerous antivirus software and found a serious security vulnerability that the hackers exploited the vulnerability could put a virus into the hacker's attack tools, the affected antivirus software including AVG, McAfee, Kaspersky. The third large virus in the...

Kaspersky Total Security 'avp.exe' Authentication Bypass Vulnerability

Kaspersky Total Security is an all-encompassing multi-device version of antivirus software. A remote authentication bypass vulnerability exists in Kaspersky Total Security, which could be exploited by remote attackers to bypass authentication mechanisms and perform unauthorized operations...

[SYSS-2015-006] Kaspersky Total Security - Use of One-Way Hash withouth a Salt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-006 Product: Kaspersky Total Security KTS Vendor: Kaspersky Lab ZAO Affected Versions: 15.0.1.415 Tested Versions: 15.0.1.415 Vulnerability Type: Use of a One-Way Hash without a Salt CWE-759 Risk Level: Low Solution Status:...

Kaspersky Total Security 15.0.1.415 Authentication Bypass Vulnerability

By analyzing the password-based authentication for unloading the Kaspersky Total Security protection, the SySS GmbH found out, that the password comparison is done within the process avp.exe actually within the used module shellservice.dll, which runs or can be run in the context of the current...

Kaspersky Total Security 15.0.1.415 Unsalted Hash Vulnerability

The SySS GmbH found out that the administrator password for protecting different functions of the Kaspersky Total Security software, like managing backups or stopping protection services, is stored as raw, unsalted MD5 hash value in the Windows registry. Product: Kaspersky Total Security KTS...

Kaspersky Total Security 15.0.1.415 Unsalted Hash

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-006 Product: Kaspersky Total Security KTS Vendor: Kaspersky Lab ZAO Affected Versions: 15.0.1.415 Tested Versions: 15.0.1.415 Vulnerability Type: Use of a One-Way Hash without a Salt CWE-759 Risk Level: Low Solution Status:...

PT-2015-2913

Name of the Vulnerable Software and Affected Versions Kaspersky Total Security version 15.0.2.361 Kaspersky Total Security affected versions not specified Description The issue is related to the allocation of memory with Read, Write, Execute RWX permissions at predictable addresses when protectin...

Memory corruption

K7Sentry.sys in K7 Computing Ultimate Security, Anti-Virus Plus, and Total Security before 14.2.0.253 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x95002570, 0x95002574, 0x95002580, 0x950025a8, 0x950025ac, or 0x950025c8 IOCTL call...

CVE-2014-9643: Undefined Security Weakness

K7Sentry.sys in K7 Computing Ultimate Security, Anti-Virus Plus, and Total Security before 14.2.0.253 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x95002570, 0x95002574, 0x95002580, 0x950025a8, 0x950025ac, or 0x950025c8 IOCTL call...

PT-2015-4321

Name of the Vulnerable Software and Affected Versions K7 Computing Ultimate Security versions prior to 14.2.0.253 K7 Computing Anti-Virus Plus versions prior to 14.2.0.253 K7 Computing Total Security versions prior to 14.2.0.253 Description The issue allows local users to gain privileges by writi...

K7 Total Security Privilege Escalation Vulnerability (Feb 2015) - Windows

K7 Total Security is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...