Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2009-2966

CWE-3994 documents4 sources
Severity
4.3MEDIUM
EPSS
9.3%
top 7.26%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
2
Kaspersky Kaspersky Anti-virusKaspersky Kaspersky Internet Security
Timeline
PublishedAug 25
Latest updateMay 2

Description

avp.exe in Kaspersky Internet Security 9.0.0.459 and Anti-Virus 9.0.0.463 allows remote attackers to cause a denial of service (CPU consumption and network connectivity loss) via an HTTP URL request that contains a large number of dot "." characters.

CVSS vector

AV:N/AC:M/C:N/I:N/A:PExploitability: 8.6 | Impact: 2.9

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-8fc7-mgr4-r5h3: avp↗2022-05-02
▶
CVEList
CVE-2009-2966: avp↗2009-08-25
▶

💥Exploits & PoCs

1
Exploit-DB
Kaspersky 2010 - Remote Memory Corruption / Denial of Service (PoC)↗2009-08-28
▶
CVE-2009-2966 (MEDIUM CVSS 4.3) | avp.exe in Kaspersky Internet Secur | cvebase.io