Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Kaspersky AntiVirus Engine 6.0.1.411 for Windows and 5.5-10 for Linux allows remote attackers to cause a denial of service (CPU consumption) via a crafted UPX compressed file with a negative offset, which triggers an infinite loop during decompression.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Kaspersky AntiVirus UPX文件解压远程拒绝服务漏洞
Vulnerability Description
Kaspersky Antivirus是非常流行的杀毒软件。 Kaspersky AntiVirus在处理UPX文件时存在设计错误，畸形恶意的文件导致防病毒引擎陷入死循环无法执行正常的功能。 Kaspersky Antivirus的杀毒引擎在处理UPX压缩打包的可执行程序时存在拒绝服务漏洞，畸形的压缩数据可能导致解压例程陷入死循环。具体来讲，负数数据偏移导致无限的处理同一压缩数据块。
CVSS Information
N/A
Vulnerability Type
N/A