PT-2020-2396 · Kaspersky · Kaspersky Anti Targeted Attack Agent+10
Published
2020-02-26
·
Updated
2020-02-26
CVSS v2.0
6.8
Medium
| Vector | AV:L/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Kaspersky Anti-Virus (affected versions not specified)
Kaspersky Internet Security (affected versions not specified)
Kaspersky Total Security (affected versions not specified)
Kaspersky Free (affected versions not specified)
Kaspersky Security Cloud (affected versions not specified)
Kaspersky Password Manager (affected versions not specified)
Kaspersky Safe Kids (affected versions not specified)
Kaspersky Software Updater (affected versions not specified)
Kaspersky Endpoint Security (affected versions not specified)
Kaspersky Small Office Security (affected versions not specified)
Kaspersky Anti Targeted Attack Agent (affected versions not specified)
Description
The issue exists due to insufficient input validation in the inter-process communication component of Kaspersky antivirus products. Exploitation of this issue may allow an attacker to execute arbitrary code.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Kaspersky Anti Targeted Attack Agent
Kaspersky Anti-Virus
Kaspersky Endpoint Security
Kaspersky Free
Kaspersky Internet Security
Kaspersky Password Manager
Kaspersky Safe Kids
Kaspersky Security Cloud
Kaspersky Small Office Security
Kaspersky Software Updater
Kaspersky Total Security