CVE-2005-3142 Heap-based buffer overflow in Kaspersky Antivirus (KAV) 5.0 and Kaspersky Personal Security Suite 1.1 allows remote attackers to execute arbitrary code via a CAB file with large records after the head...
HighCVSS 10.0
EPSS 41.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in Kaspersky Antivirus (KAV) 5.0 and Kaspersky Personal Security Suite 1.1 allows remote attackers to execute arbitrary code via a CAB file with large records after the header.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kaspersky lab kaspersky anti-virus | = 5.0 | No fix listed |
| kaspersky lab kaspersky anti-virus personal | = 5.0 | No fix listed |
| kaspersky lab kaspersky anti-virus personal pro | = 5.0 | No fix listed |
| kaspersky lab kaspersky personal security suite | = 1.1 | No fix listed |
References
- 20051003 Kaspersky Antivirus Library Remote Heap Overflow mailing-list
- 20051003 Kaspersky Antivirus Remote Heap Overflow mailing-list
- 17024 third-party-advisory vendor-advisory
- 44 third-party-advisory
- 1014998 vdb-entry
- www.kaspersky.com vendor-advisory
- 19850 vdb-entry
- www.rem0te.com vendor-advisory
- 14998 vdb-entry
- ADV-2005-1934 vdb-entry
- kaspersky-cab-heap-overflow(22497) vdb-entry