PT-2007-3225 · Kaspersky · Kl.Sysinfo Activex Control+2

Publicado 2007-04-05 · Atualizado 2017-07-29 · CVE-2007-1879

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Kaspersky Anti-Virus versions prior to 6.0.2.614 Kaspersky Internet Security versions prior to 6.0.2.614

Description: The issue allows remote attackers to read arbitrary files by triggering an outbound anonymous FTP session that invokes the PUT command, specifically through the StartUploading function in the KL.SysInfo ActiveX control.

Recommendations: For Kaspersky Anti-Virus versions prior to 6.0.2.614, update to version 6.0.2.614 or later. For Kaspersky Internet Security versions prior to 6.0.2.614, update to version 6.0.2.614 or later.

Correção

Identificadores relacionados

CVE-2007-1879

Produtos afetados

Kl.Sysinfo Activex Control

Kaspersky Anti-Virus

Kaspersky Internet Security

Referências · 10

• http://xforce.iss.net/xforce/xfdb/33464 · Nota
• http://frsirt.com/english/advisories/2007/1268 · Nota
• http://secunia.com/advisories/24778 · Aviso do Fabricante
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=504 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33464 · Nota
• http://kaspersky.com/technews?id=203038694 · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/1268 · Nota
• http://securityfocus.com/bid/23325 · Nota
• http://securitytracker.com/id?1017871 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1879 · Nota de Segurança