Vulnerability in Kaspersky Lab Antivirus Engine
CVE-2007-1281
Kaspersky AntiVirus Engine 6.0.1.411 for Windows and 5.5-10 for Linux allows remote attackers to cause a denial of service (CPU consumption) via a crafted UPX compressed file with a negative offset, which triggers an infinite loop during decompression.
EPSS: 0.029 (85.6th percentile) — read the EPSS interpretation.
Affected products
- Kaspersky_lab Kaspersky_antivirus_engine — versions 6.0.1.411, 5.5.10
- Linux Linux_kernel
- Microsoft All_windows — versions abstract_cpe
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_IDEFENSE, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)