CVE-2005-3142

Published: Oct 5, 2005Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Heap-based buffer overflow in Kaspersky Antivirus (KAV) 5.0 and Kaspersky Personal Security Suite 1.1 allows remote attackers to execute arbitrary code via a CAB file with large records after the header.

Affected (5)

Products: Kaspersky Lab: Kaspersky Anti Virus, Kaspersky Anti Virus Personal, Kaspersky Anti Virus Personal Pro, Kaspersky Personal Security Suite

4 products

Kaspersky Anti Virus

Kaspersky Anti Virus Personal

Kaspersky Anti Virus Personal Pro

Kaspersky Personal Security Suite

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Kaspersky Lab Kaspersky Anti Virus	Version 5.0
Kaspersky Lab Kaspersky Anti Virus	Version 5.0
Kaspersky Lab Kaspersky Anti Virus Personal	Version 5.0
Kaspersky Lab Kaspersky Anti Virus Personal Pro	Version 5.0
Kaspersky Lab Kaspersky Personal Security Suite	Version 1.1

References (22)

http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0018.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=112837961522571&w=2

Source: cve@mitre.org

http://secunia.com/advisories/17024/

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/44

Source: cve@mitre.org

http://securitytracker.com/id?1014998

Source: cve@mitre.org

http://www.kaspersky.com/news?id=171512144

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/19850

Source: cve@mitre.org

http://www.rem0te.com/public/images/kaspersky.pdf

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/14998

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2005/1934

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/22497

Source: cve@mitre.org

http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0018.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=112837961522571&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17024/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securityreason.com/securityalert/44

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1014998

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kaspersky.com/news?id=171512144

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.osvdb.org/19850

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.rem0te.com/public/images/kaspersky.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/14998

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2005/1934

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/22497

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.