Lucene search

KasperskyCVE-2020-25044

HistorySep 02, 2020 - 8:15 p.m.

CVE-2020-25044

2020-09-0220:15:10

Kaspersky

web.nvd.nist.gov

kaspersky

virus removal

kvrt

15.0.23.0

cve-2020-25044

file corruption

security vulnerability

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:P/A:P

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

Percentile

12.6%

JSON

Kaspersky Virus Removal Tool (KVRT) prior to 15.0.23.0 was vulnerable to arbitrary file corruption that could provide an attacker with the opportunity to eliminate content of any file in the system.

Affected configurations

Nvd

Node

kasperskyvirus_removal_toolRange<15.0.23.0

VendorProductVersionCPE
kasperskyvirus_removal_tool*cpe:2.3:a:kaspersky:virus_removal_tool:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
kaspersky	virus_removal_tool	*	cpe:2.3:a:kaspersky:virus_removal_tool::::::::

CNA Affected

[
  {
    "product": "Kaspersky Virus Removal Tool",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "prior to 15.0.23.0"
      }
    ]
  }
]

References

support.kaspersky.com/general/vulnerability.aspx?el=12430#290720

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:P/A:P

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVE-2020-25044