[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247862

 
 

909

 
 

194603

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2009-2966Date: (C)2009-08-25   (M)2023-12-22


avp.exe in Kaspersky Internet Security 9.0.0.459 and Anti-Virus 9.0.0.463 allows remote attackers to cause a denial of service (CPU consumption and network connectivity loss) via an HTTP URL request that contains a large number of dot "." characters.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.3
Exploit Score: 8.6
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: NONE
Integrity: NONE
Availability: PARTIAL
  
Reference:
SECTRACK-1022754
SECTRACK-1022755
http://archives.neohapsis.com/archives/fulldisclosure/2009-08/0252.html
http://securityreason.com/achievement_securityalert/66
BID-36084
SECUNIA-36405
OSVDB-57173
http://www.h-online.com/security/Kaspersky-confirm-and-close-DoS-vulnerability--/news/114077
kaspersky-antivirus-internet-http-dos(52571)

CWE    1
CWE-399

© SecPod Technologies