medium4.3Public exploit code
CVE-2009-2966
avp.exe in Kaspersky Internet Security 9.0.0.459 and Anti-Virus 9.0.0.463 allows remote attackers to cause a denial of service (CPU consumption and network con…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Kaspersky 2010 - Remote Memory Corruption / Denial of Service (PoC)2009-08-28 · dos · windows · Verified
Impact
avp.exe in Kaspersky Internet Security 9.0.0.459 and Anti-Virus 9.0.0.463 allows remote attackers to cause a denial of service (CPU consumption and network connectivity loss) via an HTTP URL request that contains a large number of dot "." characters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kaspersky | Kaspersky Anti-Virus | Version 9.0.0.463 |
| Kaspersky | Kaspersky Internet Security | Version 9.0.0.459 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/fulldisclosure/2009-08/0252.html
- http://secunia.com/advisories/36405
- http://securityreason.com/achievement_securityalert/66
- http://www.h-online.com/security/Kaspersky-confirm-and-close-DoS-vulnerability--/news/114077
- http://www.osvdb.org/57173
- http://www.securityfocus.com/bid/36084
- http://www.securitytracker.com/id?1022754
- http://www.securitytracker.com/id?1022755
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52571
- http://archives.neohapsis.com/archives/fulldisclosure/2009-08/0252.html
- http://secunia.com/advisories/36405
- http://securityreason.com/achievement_securityalert/66
- http://www.h-online.com/security/Kaspersky-confirm-and-close-DoS-vulnerability--/news/114077
- http://www.osvdb.org/57173
- http://www.securityfocus.com/bid/36084
- http://www.securitytracker.com/id?1022754
- http://www.securitytracker.com/id?1022755
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52571