CVE-2007-1112

Description

Kaspersky Anti-Virus 6.0 and Internet Security 6.0 exposes unsafe methods in the (a) AXKLPROD60Lib.KAV60Info (AxKLProd60.dll) and (b) AXKLSYSINFOLib.SysInfo (AxKLSysInfo.dll) ActiveX controls, which allows remote attackers to "download" or delete arbitrary files via crafted arguments to the (1) DeleteFile, (2) StartBatchUploading, (3) StartStrBatchUploading, or (4) StartUploading methods.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/33464

http://www.zerodayinitiative.com/advisories/ZDI-07-014.html

http://www.vupen.com/english/advisories/2007/1268

http://www.securitytracker.com/id?1017885

http://www.securitytracker.com/id?1017884

http://www.securityfocus.com/bid/23345

http://www.securityfocus.com/archive/1/464882/100/0/threaded

http://www.kaspersky.com/technews?id=203038694

http://secunia.com/advisories/24778

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3