Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Kaspersky Labs Antivirus Engine 6.0 for Windows and 5.5-10 for Linux before 20070102 enter an infinite loop upon encountering an invalid NumberOfRvaAndSizes value in the Optional Windows Header of a portable executable (PE) file, which allows remote attackers to cause a denial of service (CPU consumption) by scanning a crafted PE file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Kaspersky AntiVirus扫描引擎PE文件处理拒绝服务漏洞
Vulnerability Description
Kaspersky Antivirus是非常流行的杀毒软件。 Kaspersky Antivirus在处理特制的PE文件时存在拒绝服务漏洞，远程攻击者可能利用此漏洞导致扫描引擎陷入死循环。PE文件中的一个头部结构选项是Optional Windows Header部分，该部分包含有Windows链接器和加载器所需要的信息。NumberOfRvaAndSizes字段的无效值会导致Kaspersky在无限循环中反复地寻找并读取文件的同一部分，这样扫描引擎就会陷入死循环，无法再扫描文件。
CVSS Information
N/A
Vulnerability Type
N/A