PT-2019-4506 · Kaspersky · Kaspersky Security Cloud+5
Wladimir Palant
·
Published
2019-11-26
·
Updated
2020-08-24
·
CVE-2019-15686
CVSS v2.0
5.8
Medium
| Vector | AV:N/AC:M/Au:N/C:N/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Kaspersky Anti-Virus versions up to 2020
Kaspersky Internet Security versions up to 2020
Kaspersky Total Security versions up to 2020
Kaspersky Free Anti-Virus versions up to 2020
Kaspersky Small Office Security versions up to 2020
Kaspersky Security Cloud versions up to 2020
Description
The web protection component of the affected Kaspersky products contains an issue that allows a remote attacker to disable various anti-virus protection features, potentially leading to a denial of service (DoS) or bypass of security measures. This is due to insufficient input validation.
Recommendations
For Kaspersky Anti-Virus versions up to 2020, update to a version later than 2020 to resolve the issue.
For Kaspersky Internet Security versions up to 2020, update to a version later than 2020 to resolve the issue.
For Kaspersky Total Security versions up to 2020, update to a version later than 2020 to resolve the issue.
For Kaspersky Free Anti-Virus versions up to 2020, update to a version later than 2020 to resolve the issue.
For Kaspersky Small Office Security versions up to 2020, update to a version later than 2020 to resolve the issue.
For Kaspersky Security Cloud versions up to 2020, update to a version later than 2020 to resolve the issue.
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Kaspersky Anti-Virus
Kaspersky Free Anti-Virus
Kaspersky Internet Security
Kaspersky Security Cloud
Kaspersky Small Office Security
Kaspersky Total Security