← Back

CVE-2016-4329

nvd nist
Published: Jan 6, 2017Modified: May 6, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

A local denial of service vulnerability exists in window broadcast message handling functionality of Kaspersky Anti-Virus software. Sending certain unhandled window messages, an attacker can cause application termination and in the same way bypass KAV self-protection mechanism.

Affected (3)

Kaspersky
3 products
Anti Virus
Internet Security
Total Security
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Anti Virus
Version 16.0.0.614
Internet Security
Version 16.0.0.614
Total Security
Version 16.0.0.614

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (6)

Source: cret@cert.org
Source: cret@cert.org
ExploitTechnical DescriptionThird Party AdvisoryVDB Entry
Source: nvd@nist.gov
Third Party AdvisoryVDB Entry
Source: nvd@nist.gov
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitTechnical DescriptionThird Party AdvisoryVDB Entry

Timeline

No history available yet.