Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2007-1880
HistoryApr 06, 2007 - 12:19 a.m.

CVE-2007-1880

2007-04-0600:19:00
mitre
web.nvd.nist.gov
28
cve-2007-1880
integer overflow
klif.sys
kaspersky anti-virus
arbitrary code execution
nvd

CVSS2

6.6

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:S/C:C/I:C/A:C

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

43.0%

JSON

Integer overflow in the _NtSetValueKey function in klif.sys in Kaspersky Anti-Virus, Anti-Virus for Workstations, Anti-Virus for File Server 6.0, and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows context-dependent attackers to execute arbitrary code via a large, unsigned “data size argument,” which results in a heap overflow.

Affected configurations

Nvd
Node
kaspersky_labkaspersky_anti-virusRange≤6.0file_servers
OR
kaspersky_labkaspersky_anti-virusRange≤6.0windows_workstation
OR
kaspersky_labkaspersky_anti-virusMatch6.0
OR
kaspersky_labkaspersky_internet_securityRange≤6.0.1.411
VendorProductVersionCPE
kaspersky_labkaspersky_anti-virus*cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:*:*:file_servers:*:*:*:*:*
kaspersky_labkaspersky_anti-virus*cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:*:*:windows_workstation:*:*:*:*:*
kaspersky_labkaspersky_anti-virus6.0cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:6.0:*:*:*:*:*:*:*
kaspersky_labkaspersky_internet_security*cpe:2.3:a:kaspersky_lab:kaspersky_internet_security:*:*:*:*:*:*:*:*

Related

nvd 1
cvelist 1
prion 1
kaspersky 1
securityvulns 1
nessus 1
nvd
nvd
CVE-2007-1880
2007-04-06 00:19:00
cvelist
cvelist
CVE-2007-1880
2007-04-06 00:00:00
prion
prion
Integer overflow
2007-04-06 00:19:00
kaspersky
kaspersky
KLA10234 Multiple vulnerabilities in Kaspersky products
2007-04-05 00:00:00
securityvulns
securityvulns
Multiple Kaspersky Antivirus / Internet Security security vulnerabilities
2007-04-06 00:00:00
nessus
nessus
Kaspersky Anti-Virus < 6.0.2.614 Multiple Vulnerabilities
2007-04-10 00:00:00

CVSS2

6.6

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:S/C:C/I:C/A:C

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

43.0%

JSON
Related for CVE-2007-1880
nvd1cvelist1prion1kaspersky1securityvulns1nessus1