DoS vulnerability in Kaspersky products
According to an advisory from Maksymilian Arciemowicz, a security specialist at SecurityReason, Kaspersky Internet Security 2010 and Anti-Virus 2010 can be compromised via specially crafted URLs. The products use a filter proxy they insert between the local browser and the network to parse the URLs requested in the browser. If a URL contains more than 1024 consecutive periods (ASCII dec 46), a programming flaw causes a drastic increase in the CPU load of the avp.exe component. As a result, the browser is no longer able to access any web pages.
The flaw can be triggered via links in web pages and in HTML emails. The bug has been verified in Kaspersky Internet Security 2010 9.0.0.459 under Windows Vista Enterprise and in Kaspersky Anti-Virus 2010 9.0.0.463 under Windows XP Home Edition. An update to fix the problem has yet to be released.
See also:
- Kaspersky AV/IS 2010 (avp.exe) Denial-of-Service, a security advisory from SecurityReason.
(crve)
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/6/7/2/comingin310_4_kicker-4977194bfb0de0d7.png)
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/3/2/3/comingin310_3_kicker-151cd7b9e9660f05.png)
