PT-2003-2389 · Kaspersky · Kaspersky Anti-Virus

Publicado

2003-12-31

·

Atualizado

2017-07-29

·

CVE-2003-1444

CVSS v2.0

4.4

Média

VetorAV:L/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Kaspersky Antivirus version 4.0.9.0
Description The issue allows local users to cause a denial of service, either by consuming CPU resources or crashing the system, and prevents malicious code from being detected. This is achieved by using a file with a long pathname.
Recommendations For version 4.0.9.0, consider updating to a newer version that addresses this issue, as using files with long pathnames can be used to exploit this weakness. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2003-1444

Produtos afetados

Kaspersky Anti-Virus