Kaspersky Online Scanner Vulnerability

Malcontent · Oct 14, 2007

http://www.kaspersky.com/news?id=207575572

Kaspersky Online Scanner version 5.0.98.0 corrects the high-risk vulnerability KLV07-09 (CVE-2007-3675). Insufficient control of input parameters in the ActiveX component of Kaspersky Online Scanner version 5.0.93.1 and earlier versions could result in a buffer overflow which could potentially enable an attacker to execute malicious code on a user’s computer.

The vulnerability was discovered by Stephen Fewer of Harmony Security working with the VeriSign iDefense VCP. Kaspersky Lab would like to thank the experts from Harmony Security and iDefence for providing information about the vulnerability, making it possible to eliminate the threat before it could be exploited.

Kaspersky Lab strongly recommends that all Kaspersky Online Scanner users install the new version of the application, which is available at http://www.kaspersky.com/kos/eng/partner/default/kavwebscan.html
Click to expand...

Edit: fixed link. Thanks, stapp.

stapp · Oct 14, 2007

I cannot get your link to the new scanner to work, but this one does

http://www.kaspersky.com/kos/eng/partner/default/kavwebscan.html

Log in or Sign up

Kaspersky Online Scanner Vulnerability

Malcontent Registered Member

stapp Global Moderator

Log in or Sign up

Kaspersky Online Scanner Vulnerability

Malcontent Registered Member

stapp Global Moderator

Useful Searches