Vulnerability Details CVE-2009-2966
avp.exe in Kaspersky Internet Security 9.0.0.459 and Anti-Virus 9.0.0.463 allows remote attackers to cause a denial of service (CPU consumption and network connectivity loss) via an HTTP URL request that contains a large number of dot "." characters.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.112
EPSS Ranking 93.1%
CVSS Severity
CVSS v2 Score 4.3
References
- http://archives.neohapsis.com/archives/fulldisclosure/2009-08/0252.html
- http://secunia.com/advisories/36405
- http://securityreason.com/achievement_securityalert/66
- http://www.h-online.com/security/Kaspersky-confirm-and-close-DoS-vulnerability--/news/114077
- http://www.osvdb.org/57173
- http://www.securityfocus.com/bid/36084
- http://www.securitytracker.com/id?1022754
- http://www.securitytracker.com/id?1022755
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52571
- http://archives.neohapsis.com/archives/fulldisclosure/2009-08/0252.html
- http://secunia.com/advisories/36405
- http://securityreason.com/achievement_securityalert/66
- http://www.h-online.com/security/Kaspersky-confirm-and-close-DoS-vulnerability--/news/114077
- http://www.osvdb.org/57173
- http://www.securityfocus.com/bid/36084
- http://www.securitytracker.com/id?1022754
- http://www.securitytracker.com/id?1022755
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52571
Products affected by CVE-2009-2966
-
cpe:2.3:a:kaspersky:kaspersky_anti-virus:9.0.0.463
-
cpe:2.3:a:kaspersky:kaspersky_internet_security:9.0.0.459