Unscored severity · published Oct 12, 2007
CVE-2007-3675
Multiple format string vulnerabilities in the kavwebscan.CKAVWebScan ActiveX control (kavwebscan.dll) in Kaspersky Online Scanner before 5.0.98 allow remote attackers to execute…
–
CVSS
4.8%
EPSS
No
On KEV
Description
Multiple format string vulnerabilities in the kavwebscan.CKAVWebScan ActiveX control (kavwebscan.dll) in Kaspersky Online Scanner before 5.0.98 allow remote attackers to execute arbitrary code via format string specifiers in "various string formatting functions," which trigger heap-based buffer overflows.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.8% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OS
Online Scanner · Kaspersky Lab
through 5.0.93 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3675
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3675
labs.idefense.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=606
Patch
http://secunia.com/advisories/27187
Patch
http://securitytracker.com/id?1018800
Patch
http://www.kaspersky.com/news?id=207575572
Patch
http://www.securityfocus.com/bid/26004
www.vupen.com
http://www.vupen.com/english/advisories/2007/3455