CVE-2021-27223

5.5MEDIUM

Key Information:

Vendor
Kaspersky
Status
Kaspersky Anti-virus Products For Home And Kaspersky Endpoint Security
Vendor
CVE Published:
1 April 2022

Summary

A denial-of-service issue existed in one of modules that was incorporated in Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security. A local user could cause Windows crash by running a specially crafted binary module. The fix was delivered automatically. Credits: (Straghkov Denis, Kurmangaleev Shamil, Fedotov Andrey, Kuts Daniil, Mishechkin Maxim, Akolzin Vitaliy) @ ISPRAS

Affected Version(s)

Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security with antivirus databases released before June 2021

References

https://support.kaspersky.com/general/vulnerability.aspx?...
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.