Vulnerabilities > CVE-2021-27223 - Unspecified vulnerability in Kaspersky products

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

kaspersky

NVD

Published: 2022-04-01

Updated: 2024-11-21

Summary

A denial-of-service issue existed in one of modules that was incorporated in Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security. A local user could cause Windows crash by running a specially crafted binary module. The fix was delivered automatically. Credits: (Straghkov Denis, Kurmangaleev Shamil, Fedotov Andrey, Kuts Daniil, Mishechkin Maxim, Akolzin Vitaliy) @ ISPRAS

Vulnerable Configurations

Part	Description	Count
Application	Kaspersky Kaspersky Total Security - Kaspersky Total Security 12.03.2022 Kaspersky Total Security 16.0.0.614 Kaspersky Total Security 2019 Kaspersky Total Security 2020 Kaspersky Small Office Security - Kaspersky Small Office Security 4.0 Kaspersky Small Office Security 5.0 Kaspersky Small Office Security 6.0 Kaspersky Small Office Security 12.03.2022 Kaspersky Security Cloud - Kaspersky Security Cloud 12.03.2022 Kaspersky Security Cloud 2019 Kaspersky Security Cloud 2020 Kaspersky Endpoint Security - Kaspersky Endpoint Security 10 Kaspersky Endpoint Security 11.0.0 Kaspersky Endpoint Security 11.0.1 Kaspersky Endpoint Security 11.1.0 Kaspersky Endpoint Security 11.6.0 Kaspersky Endpoint Security 12.03.2022 Kaspersky Anti Virus - Kaspersky Anti Virus 12.03.2022 Kaspersky Anti Virus 16.0.0.614 Kaspersky Anti Virus 2019 Kaspersky Internet Security - Kaspersky Internet Security 11.12.4.1622 Kaspersky Internet Security 12.03.2022 Kaspersky Internet Security 16.0.0 Kaspersky Internet Security 16.0.0.614 Kaspersky Internet Security 21.1 Kaspersky Internet Security 2019	38

Summary

Vulnerable Configurations

References