Kaspersky Antivirus (KAV) 4.0.9.0 does not detect viruses in files with MS-DOS device names in their filenames, which allows local users to bypass virus protection, as demonstrated using aux.vbs and aux.com.
References
Configurations
History
20 Nov 2024, 23:47
Type | Values Removed | Values Added |
---|---|---|
References | () http://archives.neohapsis.com/archives/bugtraq/2003-02/0130.html - Exploit | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/11292 - |
Information
Published : 2003-12-31 05:00
Updated : 2024-11-20 23:47
NVD link : CVE-2003-1443
Mitre link : CVE-2003-1443
CVE.ORG link : CVE-2003-1443
JSON object : View
Products Affected
kaspersky_lab
- kaspersky_anti-virus
CWE
CWE-20
Improper Input Validation