Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2007-1879
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2007-1879

Description:
The StartUploading function in KL.SysInfo ActiveX control (AxKLSysInfo.dll) in Kaspersky Anti-Virus 6.0 and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows remote attackers to read arbitrary files by triggering an outbound anonymous FTP session that invokes the PUT command. NOTE: this issue might be related to CVE-2007-1112.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/33464

ST
  1017871

SAID
  Secunia Advisory: SA24778

IDEFENSE
  http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=504

CONFIRM
  http://www.kaspersky.com/technews?id=203038694

BID
  23325


Return to the previous page.