CVE-2009-2966

Published: Aug 25, 2009Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

avp.exe in Kaspersky Internet Security 9.0.0.459 and Anti-Virus 9.0.0.463 allows remote attackers to cause a denial of service (CPU consumption and network connectivity loss) via an HTTP URL request that contains a large number of dot "." characters.

Affected (2)

Products: Kaspersky: Kaspersky Anti Virus, Kaspersky Internet Security

2 products

Kaspersky Anti Virus

Kaspersky Internet Security

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Kaspersky Kaspersky Anti Virus	Version 9.0.0.463
Kaspersky Kaspersky Internet Security	Version 9.0.0.459

Related CWEs

References (18)

http://archives.neohapsis.com/archives/fulldisclosure/2009-08/0252.html

Source: cve@mitre.org

Exploit

http://secunia.com/advisories/36405

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/achievement_securityalert/66

Source: cve@mitre.org

Exploit

http://www.h-online.com/security/Kaspersky-confirm-and-close-DoS-vulnerability--/news/114077

Source: cve@mitre.org

http://www.osvdb.org/57173

Source: cve@mitre.org

http://www.securityfocus.com/bid/36084

Source: cve@mitre.org

Exploit

http://www.securitytracker.com/id?1022754

Source: cve@mitre.org

http://www.securitytracker.com/id?1022755

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/52571

Source: cve@mitre.org

http://archives.neohapsis.com/archives/fulldisclosure/2009-08/0252.html

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://secunia.com/advisories/36405

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securityreason.com/achievement_securityalert/66

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.h-online.com/security/Kaspersky-confirm-and-close-DoS-vulnerability--/news/114077

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/57173

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/36084

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securitytracker.com/id?1022754

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1022755

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/52571

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.