PT-2021-4634 · Mozilla+1 · Firefox+1

Abdelhamid Naceri · Published 2021-11-01 · Updated 2022-04-29 · CVE-2021-35053

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Kaspersky Endpoint Security for Windows (affected versions not specified) Firefox (affected versions not specified)

Description The issue is related to a possible system denial of service. An attacker could exploit this by changing specific browser parameters or files in a certain way, potentially making the system unbootable upon reboot. The vulnerability in Kaspersky Endpoint Security for Windows is associated with errors in restricting access to directory paths, which could allow an attacker to cause a denial of service during operating system loading.

Recommendations For Kaspersky Endpoint Security for Windows, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Firefox, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2021-05323

CVE-2021-35053

ZDI-21-1280

ZDI-22-431

Affected Products

Firefox

Kaspersky Endpoint Security For Windows

References · 10

• https://osv.dev/vulnerability/CVE-2021-35053 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-21-1280 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-35053 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-22-431 · Security Note
• https://bdu.fstec.ru/vul/2021-05323 · Security Note
• https://support.kaspersky.com/KESWin/11.6.0/ru-RU/202714.htm · Note
• https://support.kaspersky.ru/15816#block2 · Note
• https://t.me/cibsecurity/31791 · Telegram Post
• https://support.kaspersky.ru/general/vulnerability.aspx?el=12430#011121 · Note
• https://support.kaspersky.com/general/vulnerability.aspx?el=12430#01112021 · Note