Vulnerabilities > Kaspersky LAB > Kaspersky Anti Virus Personal PRO

DATE CVE VULNERABILITY TITLE RISK
2006-10-20 CVE-2006-4926 Local Privilege Escalation vulnerability in Kaspersky Labs Anti-Virus NDIS-TDI Hooking Engine
The NDIS-TDI Hooking Engine, as used in the (1) KLICK (KLICK.SYS) and (2) KLIN (KLIN.SYS) device drivers 2.0.0.281 for in Kaspersky Labs Anti-Virus 6.0.0.303 and other Anti-Virus and Internet Security products, allows local users to execute arbitrary code via crafted Irp structure with invalid addresses in the 0x80052110 IOCTL.
local
low complexity
kaspersky-lab
7.2
2005-10-05 CVE-2005-3142 Remote Heap Overflow vulnerability in Kaspersky Anti-Virus Library CAB Record
Heap-based buffer overflow in Kaspersky Antivirus (KAV) 5.0 and Kaspersky Personal Security Suite 1.1 allows remote attackers to execute arbitrary code via a CAB file with large records after the header.
network
low complexity
kaspersky-lab
critical
10.0