CVE-2016-4329

Опубликовано: 06 янв. 2017

Источник: nvd

CVSS3: 5.5

CVSS2: 2.1

EPSS Низкий

Описание

A local denial of service vulnerability exists in window broadcast message handling functionality of Kaspersky Anti-Virus software. Sending certain unhandled window messages, an attacker can cause application termination and in the same way bypass KAV self-protection mechanism.

Ссылки

http://www.securityfocus.com/bid/92771
http://www.talosintelligence.com/reports/TALOS-2016-0175/
Exploit
Technical Description
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/92771/info
Third Party Advisory
VDB Entry
https://support.kaspersky.com/vulnerability.aspx?el=12430#010916
Vendor Advisory
http://www.securityfocus.com/bid/92771
http://www.talosintelligence.com/reports/TALOS-2016-0175/
Exploit
Technical Description
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:kaspersky:anti-virus:16.0.0.614:*:*:*:*:*:*:*

cpe:2.3:a:kaspersky:internet_security:16.0.0.614:*:*:*:*:*:*:*

cpe:2.3:a:kaspersky:total_security:16.0.0.614:*:*:*:*:*:*:*

EPSS

Процентиль: 17%

0.00053

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-g386-8w5p-9mq7