Back to Database
Status published
Medium
CVE-2009-2966
avp.exe in Kaspersky Internet Security 9.0.0.459 and Anti-Virus 9.0.0.463 allows...
Vulnerability Description
avp.exe in Kaspersky Internet Security 9.0.0.459 and Anti-Virus 9.0.0.463 allows remote attackers to cause a denial of service (CPU consumption and network connectivity loss) via an HTTP URL request that contains a large number of dot "." characters.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-2966
Credits & Attribution
No credits recorded in the NVD database.
References
- http://secunia.com/advisories/36405
- http://www.osvdb.org/57173
- http://securityreason.com/achievement_securityalert/66
- http://www.securityfocus.com/bid/36084
- http://www.securitytracker.com/id?1022754
- http://www.securitytracker.com/id?1022755
- http://archives.neohapsis.com/archives/fulldisclosure/2009-08/0252.html
- http://www.h-online.com/security/Kaspersky-confirm-and-close-DoS-vulnerability--/news/114077
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52571
More from kaspersky
View All →CVE-2017-9813
In Kaspersky Anti-Virus for Linux File Server before Maintenance Pack...
Medium
6.1
CVE-2017-9812
The reportId parameter of the getReportStatus action method can be...
High
7.5
CVE-2017-9811
The kluser is able to interact with the kav4fs-control binary...
Critical
9.8
CVE-2017-9810
There are no Anti-CSRF tokens in any forms on the...
High
8.8
CVE-2016-6231
Kaspersky Safe Browser iOS before 1.7.0 does not verify X.509...
Medium
5.9
Affected Vendor
kaspersky
View all reports →Affected Software
kaspersky anti-virus, kaspersky internet security
Vulnerable Versions:
9.0.0.463, 9.0.0.459
Timeline
Official Publish:
August 25th, 2009
Last Modified:
August 7th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.