CVE-2007-1112

Kaspersky Anti-Virus 6.0 and Internet Security 6.0 exposes unsafe methods in the a AXKLPROD60Lib.KAV60Info AxKLProd60.dll and b AXKLSYSINFOLib.SysInfo AxKLSysInfo.dll ActiveX controls, which allows remote attackers to "download" or delete arbitrary files via crafted arguments to the 1 DeleteFile,...

CVE-2007-1880

Integer overflow in the NtSetValueKey function in klif.sys in Kaspersky Anti-Virus, Anti-Virus for Workstations, Anti-Virus for File Server 6.0, and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows context-dependent attackers to execute arbitrary code via a large, unsigned...

Design/Logic Flaw

Kaspersky Anti-Virus 6.0 and Internet Security 6.0 exposes unsafe methods in the a AXKLPROD60Lib.KAV60Info AxKLProd60.dll and b AXKLSYSINFOLib.SysInfo AxKLSysInfo.dll ActiveX controls, which allows remote attackers to "download" or delete arbitrary files via crafted arguments to the 1 DeleteFile,...

Integer overflow

Integer overflow in the NtSetValueKey function in klif.sys in Kaspersky Anti-Virus, Anti-Virus for Workstations, Anti-Virus for File Server 6.0, and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows context-dependent attackers to execute arbitrary code via a large, unsigned...

CVE-2007-0445

Heap-based buffer overflow in the arj.ppl module in the OnDemand Scanner in Kaspersky Anti-Virus, Anti-Virus for Workstations, and Anti-Virus for File Servers 6.0, and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows remote attackers to execute arbitrary code via crafted ARJ...

Design/Logic Flaw

The StartUploading function in KL.SysInfo ActiveX control AxKLSysInfo.dll in Kaspersky Anti-Virus 6.0 and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows remote attackers to read arbitrary files by triggering an outbound anonymous FTP session that invokes the PUT command...

CVE-2007-1879

The StartUploading function in KL.SysInfo ActiveX control AxKLSysInfo.dll in Kaspersky Anti-Virus 6.0 and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows remote attackers to read arbitrary files by triggering an outbound anonymous FTP session that invokes the PUT command...

CVE-2007-1880

Integer overflow in the NtSetValueKey function in klif.sys in Kaspersky Anti-Virus, Anti-Virus for Workstations, Anti-Virus for File Server 6.0, and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows context-dependent attackers to execute arbitrary code via a large, unsigned...

CVE-2007-1881

CVE-2007-1881 : Affected are Kaspersky products using KLIF (klif.sys) on KAV/AV for Workstations/File Servers 6.0 and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614. Local users can gain Ring-0 privileges via unspecified vectors. The vulnerability is documented with a MEDIUM seve...

CVE-2007-1112

CVE-2007-1112 affects Kaspersky Anti-Virus 6.0 and Internet Security 6.0. The issue is exposed in ActiveX controls AXKLPROD60Lib.KAV60Info (AxKLProd60.dll) and AXKLSYSINFOLib.SysInfo (AxKLSysInfo.dll), allowing remote attackers to download or delete arbitrary files via crafted arguments to Delete...

CVE-2007-1880

CVE-2007-1880: Integer overflow in the NtSetValueKey function within klif.sys exposes a heap overflow in Kaspersky Anti-Virus/Internet Security 6.0 (prior to Maintenance Pack 2, build 6.0.2.614). The issue is triggered by a large unsigned data size argument, allowing context-dependent attackers w...

CVE-2007-1112

Kaspersky Anti-Virus 6.0 and Internet Security 6.0 exposes unsafe methods in the a AXKLPROD60Lib.KAV60Info AxKLProd60.dll and b AXKLSYSINFOLib.SysInfo AxKLSysInfo.dll ActiveX controls, which allows remote attackers to "download" or delete arbitrary files via crafted arguments to the 1 DeleteFile,...

CVE-2007-0445

CVE-2007-0445 describes a heap-based buffer overflow in the arj.ppl module of the Kaspersky OnDemand Scanner engine (used by Kaspersky Anti-Virus/Internet Security products). The flaw occurs while processing ARJ archives, where data is copied into an unchecked heap-based buffer, allowing remote a...

Kaspersky AntiVirus Engine ARJ Archive Parsing Heap Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with affected installations of the Kaspersky Anti-Virus Engine. User interaction is not required to exploit this vulnerability. The specific flaw exists in the engine's handling of the ARJ archive format. The Kaspersk...

Wary of Microsoft's animated cursor, the exposed vulnerability-a vulnerability warning-the black bar safety net

3 on 2 9 September, Microsoft animated cursor, exposed the vulnerability, at the same time, the Duba anti-virus experts found that the use of this vulnerability malicious code is the domestic Internet is widely spread. With this vulnerability for Windows users once the login is implanted maliciou...

Format string

Format string vulnerability in F-Secure Anti-Virus Client Security 6.02 allows local users to cause a denial of service and possibly gain privileges via format string specifiers in the Management Server name field on the Communication settings page...

CVE-2007-1557

Format string vulnerability in F-Secure Anti-Virus Client Security 6.02 allows local users to cause a denial of service and possibly gain privileges via format string specifiers in the Management Server name field on the Communication settings page...

CVE-2007-1557

Format string vulnerability in F-Secure Anti-Virus Client Security 6.02 allows local users to cause a denial of service and possibly gain privileges via format string specifiers in the Management Server name field on the Communication settings page...

CVE-2007-1557

CVE-2007-1557 affects F-Secure Anti-Virus Client Security 6.02. The vulnerability is a format string issue in the Management Server name field on the Communication settings page, allowing local users to cause a denial of service and potentially gain privileges. Impact is described as local, with ...

F-Secure Anti-Virus Client Security本地格式串处理漏洞

F-Secure Anti-Virus Client Security是PC平台上的实时病毒监测和防护系统，支持所有WINDOWS系统。 F-Secure Anti-Virus Client Security在处理Management Server名称字段时存在格式串处理漏洞，如果攻击者在Communication设置的Management Server名称字段中提供了特制格式串的话，就可以读写任意内存，并可以导致拒绝服务。 F-Secure Anti-Virus Client Security 6.03 F-Secure Anti-Virus Client Security 6.02...