PT-2003-2388 · Kaspersky · Kaspersky Anti-Virus
Published
2003-12-31
·
Updated
2017-07-29
·
CVE-2003-1443
CVSS v2.0
4.4
Medium
| Vector | AV:L/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Kaspersky Antivirus (KAV) version 4.0.9.0
Description
The issue allows local users to bypass virus protection by using files with MS-DOS device names in their filenames. This can be demonstrated using files such as
aux.vbs and aux.com, which are not detected by the antivirus software.Recommendations
For Kaspersky Antivirus (KAV) version 4.0.9.0, consider updating the virus detection rules to include files with MS-DOS device names in their filenames, or apply a workaround to manually scan such files for viruses. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Kaspersky Anti-Virus