CVE-2016-4329 A local denial of service vulnerability exists in window broadcast message handling functionality of Kaspersky Anti-Virus software. Sending certain unhandled window messages, an attacker can cause app...
MediumCVSS 5.5
EPSS 0.57%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A local denial of service vulnerability exists in window broadcast message handling functionality of Kaspersky Anti-Virus software. Sending certain unhandled window messages, an attacker can cause application termination and in the same way bypass KAV self-protection mechanism.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kaspersky anti-virus | = 16.0.0.614 | No fix listed |
| kaspersky internet security | = 16.0.0.614 | No fix listed |
| kaspersky total security | = 16.0.0.614 | No fix listed |
References
- 92771 vdb-entry
- www.talosintelligence.com exploit technical-description third-party-advisory vdb-entry
- www.securityfocus.com third-party-advisory vdb-entry
- support.kaspersky.com vendor-advisory