Multiple Kaspersky Products PDF File Scan Evasion Vulnerability
BID:35365
Info
Multiple Kaspersky Products PDF File Scan Evasion Vulnerability
| Bugtraq ID: | 35365 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 13 2009 12:00AM |
| Updated: | Jun 15 2009 04:49PM |
| Credit: | Thierry Zoller |
| Vulnerable: |
Kaspersky Labs Work Space Security 0 Kaspersky Labs Targeted Security 0 Kaspersky Labs Security for Microsoft Exchange 2007 0 Kaspersky Labs Security for Microsoft Exchange 2003 0 Kaspersky Labs Open Space Security 0 Kaspersky Labs Mail Gateway Kaspersky® Anti-virus for MIMEsweeper 0 Kaspersky Labs Enterprise Space Security 0 Kaspersky Labs Business Space Security 0 Kaspersky Labs Anti-Virus for Windows Server Enterprise Edition 0 Kaspersky Labs Anti-Virus for Samba Server 0 Kaspersky Labs Anti-Virus for Novell NetWare 0 Kaspersky Labs Anti-Virus for Microsoft ISA Server 0 Kaspersky Labs Anti-Virus for Linux Workstation 0 Kaspersky Labs Anti-Virus for Linux Mail Server 0 Kaspersky Small Office Security 0 Kaspersky Mobile Security 0 Kaspersky Internet Security 0 Kaspersky Anti-Virus for Windows Workstation 0 Kaspersky Anti-Virus for Windows Server 0 Kaspersky Anti-Virus for Proxy Server 0 Kaspersky Anti-Virus for Lotus Notes/Domino 0 Kaspersky Anti-Virus for Linux File Server 0 Kaspersky Anti-Virus for Check Point Firewall-1 0 Kaspersky Anti-Virus 0 |
| Not Vulnerable: | |
Discussion
Multiple Kaspersky Products PDF File Scan Evasion Vulnerability
Multiple Kaspersky products are prone to a vulnerability that may allow certain PDF files to bypass the scan engine.
Successful exploits will allow attackers to distribute files containing malicious code that the antivirus application will fail to detect.
Multiple Kaspersky products are prone to a vulnerability that may allow certain PDF files to bypass the scan engine.
Successful exploits will allow attackers to distribute files containing malicious code that the antivirus application will fail to detect.
Exploit / POC
Multiple Kaspersky Products PDF File Scan Evasion Vulnerability
Attackers can use standard tools to exploit this issue.
Attackers can use standard tools to exploit this issue.
Solution / Fix
Multiple Kaspersky Products PDF File Scan Evasion Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Multiple Kaspersky Products PDF File Scan Evasion Vulnerability
References:
References:
- Kaspersky Home Page (Kasperksy)
- [TZO-30-2009] Kaspersky and the silent patch that wasn't (PDF evasion, forced fu (Thierry Zoller
- Advisory : Kaspersky generic PDF evasion (Thierry Zoller)