Kaspersky Internet Security Remote Denial of Service Vulnerability

Release date:
Updated on:

Affected Systems:
Kaspersky Labs Internet Security 13.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 58284
 
Kaspersky Internet Security is the Kaspersky Internet Security Package.
 
Kaspersky Internet Security 13.0.1.4190 has an error when the Kaspersky Anti-Virus NDIS 6 Filter component processes some IPv6 traffic. by sending specially crafted packets, it can exhaust CPU resources and cause application Denial of Service.
 
<* Source: Marc Heuse (mh@baseline-security.de)

Link: http://secunia.com/advisories/52053/
Http://seclists.org/fulldisclosure/2013/Mar/36
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Kaspersky Labs
--------------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:
 
Http://www.kaspersky.co.uk/internet-security