PT-2003-2389 · Kaspersky · Kaspersky Anti-Virus

Published 2003-12-31 · Updated 2017-07-29 · CVE-2003-1444

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Medium

Base vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Kaspersky Antivirus version 4.0.9.0

Description The issue allows local users to cause a denial of service, either by consuming CPU resources or crashing the system, and prevents malicious code from being detected. This is achieved by using a file with a long pathname.

Recommendations For version 4.0.9.0, consider updating to a newer version that addresses this issue, as using files with long pathnames can be used to exploit this weakness. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2003-1444

Affected Products

Kaspersky Anti-Virus

References · 3

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2003-02/0130.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-1444 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11291 · Note