CVE-2007-0445 Heap-based buffer overflow in the arj.ppl module in the OnDemand Scanner in Kaspersky Anti-Virus, Anti-Virus for Workstations, and Anti-Virus for File Servers 6.0, and Internet Security 6.0 before Mai...
HighCVSS 10.0
EPSS 8.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the arj.ppl module in the OnDemand Scanner in Kaspersky Anti-Virus, Anti-Virus for Workstations, and Anti-Virus for File Servers 6.0, and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows remote attackers to execute arbitrary code via crafted ARJ archives.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kaspersky lab kaspersky anti-virus | = 6.0 | No fix listed |
| kaspersky lab kaspersky internet security | <= 6.0 | No fix listed |
References
- 24778 patch third-party-advisory vendor-advisory
- www.kaspersky.com patch
- www.kaspersky.com patch
- 20070405 ZDI-07-013: Kaspersky AntiVirus Engine ARJ Archive Parsing Heap Overflow Vulnerability mailing-list
- 23346 vdb-entry
- 1017882 vdb-entry
- 1017883 vdb-entry
- ADV-2007-1268 vdb-entry
- www.zerodayinitiative.com vendor-advisory
- kaspersky-arj-bo(33489) vdb-entry