NVD

Id
53320  
Name
CVE-2007-1112  
Description
Kaspersky Anti-Virus 6.0 and Internet Security 6.0 exposes unsafe methods in the (a) AXKLPROD60Lib.KAV60Info (AxKLProd60.dll) and (b) AXKLSYSINFOLib.SysInfo (AxKLSysInfo.dll) ActiveX controls, which allows remote attackers to "download" or delete arbitrary files via crafted arguments to the (1) DeleteFile, (2) StartBatchUploading, (3) StartStrBatchUploading, or (4) StartUploading methods.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-04-05  
Modified Date
2011-03-07  
Seq
2007-1112  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
269994 53320 CVE-2007-1112 http://www.kaspersky.com/technews?id=203038694  View
269995 53320 CVE-2007-1112 20070405 ZDI-07-014: Kaspersky Anti-Virus ActiveX Control Unsafe Method Exposure Vulnerablity  View
269996 53320 CVE-2007-1112 23345  View
269997 53320 CVE-2007-1112 1017884  View
269998 53320 CVE-2007-1112 1017885  View
269999 53320 CVE-2007-1112 ADV-2007-1268  View
270000 53320 CVE-2007-1112 http://www.zerodayinitiative.com/advisories/ZDI-07-014.html  View
270001 53320 CVE-2007-1112 kaspersky-startuploading-info-disclosure(33464)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54733 JVNDB-2007-003425 Kaspersky Anti-Virus などにおけるファイルを削除される脆弱性 Kaspersky Anti-Virus および Kaspersky Internet Security には、(a) AXKLPROD60Lib.KAV60Info (AxKLProd60.dll) および (b) AXKLSYSINFOLib.SysInfo (AxKLSysInfo.dll) ActiveX コントロールで危険なメソッドを保護しないため、任意のファイルを "ダウンロード" または削除される脆弱性が存在します。 CVE-2007-1112 24467 CVE-2007-1112 53320 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003425.html 2007-04-05 2012-09-25 View