PT-2003-2388 · Kaspersky · Kaspersky Anti-Virus

Publicado

2003-12-31

·

Atualizado

2017-07-29

·

CVE-2003-1443

CVSS v2.0

4.4

Média

VetorAV:L/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Kaspersky Antivirus (KAV) version 4.0.9.0
Description The issue allows local users to bypass virus protection by using files with MS-DOS device names in their filenames. This can be demonstrated using files such as aux.vbs and aux.com, which are not detected by the antivirus software.
Recommendations For Kaspersky Antivirus (KAV) version 4.0.9.0, consider updating the virus detection rules to include files with MS-DOS device names in their filenames, or apply a workaround to manually scan such files for viruses. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2003-1443

Produtos afetados

Kaspersky Anti-Virus