PT-2019-4505 · Kaspersky · Kaspersky Security Cloud+5
Wladimir Palant
·
Published
2019-11-25
·
Updated
2020-08-24
·
CVE-2019-15685
CVSS v2.0
4.3
Medium
| Vector | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Kaspersky Anti-Virus versions up to 2020
Kaspersky Internet Security versions up to 2020
Kaspersky Total Security versions up to 2020
Kaspersky Free Anti-Virus versions up to 2020
Kaspersky Small Office Security versions up to 2020
Kaspersky Security Cloud versions up to 2020
Description
The web protection component of the affected Kaspersky products contains an issue due to insufficient input validation, allowing a remote attacker to disable security features such as private browsing and anti-banner protection.
Recommendations
For Kaspersky Anti-Virus versions up to 2020, consider disabling the web protection component until a patch is available.
For Kaspersky Internet Security versions up to 2020, restrict access to the web protection component to minimize the risk of exploitation.
For Kaspersky Total Security versions up to 2020, avoid using the private browsing feature in the web protection component until the issue is resolved.
For Kaspersky Free Anti-Virus versions up to 2020, consider temporarily disabling the anti-banner protection feature.
For Kaspersky Small Office Security versions up to 2020, restrict access to the web protection component.
For Kaspersky Security Cloud versions up to 2020, consider disabling the web protection component.
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Kaspersky Anti-Virus
Kaspersky Free Anti-Virus
Kaspersky Internet Security
Kaspersky Security Cloud
Kaspersky Small Office Security
Kaspersky Total Security