PT-2022-2062 · Microsoft+1 · Windows+6
Akolzin Vitaliy
+5
·
Published
2022-03-31
·
Updated
2022-04-11
·
CVE-2021-27223
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Kaspersky Anti-Virus (affected versions not specified)
Kaspersky Internet Security (affected versions not specified)
Kaspersky Total Security (affected versions not specified)
Kaspersky Small Office Security (affected versions not specified)
Kaspersky Security Cloud (affected versions not specified)
Kaspersky Endpoint Security (affected versions not specified)
Description
A denial-of-service issue existed in one of the modules incorporated in Kaspersky products. This issue is related to insufficient access control in the module. A local user could cause a Windows crash by running a specially crafted binary module, potentially allowing an attacker to terminate the operation of the Microsoft Windows operating system.
Recommendations
For Kaspersky Anti-Virus, consider applying the automatically delivered fix.
For Kaspersky Internet Security, consider applying the automatically delivered fix.
For Kaspersky Total Security, consider applying the automatically delivered fix.
For Kaspersky Small Office Security, consider applying the automatically delivered fix.
For Kaspersky Security Cloud, consider applying the automatically delivered fix.
For Kaspersky Endpoint Security, consider applying the automatically delivered fix.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Privilege Management
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Kaspersky Anti-Virus
Kaspersky Endpoint Security
Kaspersky Internet Security
Kaspersky Security Cloud
Kaspersky Small Office Security
Kaspersky Total Security
Windows