CVE-2024-13614
Quick assessment
Affected
Kaspersky Kaspersky Anti-Virus SDK for Windows
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Kaspersky Anti-Virus等都是俄罗斯卡巴斯基（Kaspersky）实验室的产品。Kaspersky Anti-Virus是一套杀毒软件。Kaspersky Internet Security是一套同时具有反病毒和防火墙功能的安全软件。ESET Internet Security等都是斯洛伐克ESET公司的产品。Internet Security是一套针对互联网安全的杀毒软件。Kaspersky Anti-Ransomware Tool是一个可为计算机提供反勒索功能的安全软件。Kaspers
Possible ATT&CK Techniques 2 AI
T1055 · Process Injection T1068 · Exploitation for Privilege Escalation
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-13614
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Kaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security for Virtualization Light Agent, Kaspersky Endpoint Security for Windows, Kaspersky Small Office Security, Kaspersky for Windows (Standard, Plus, Premium), Kaspersky Free, Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Security Cloud, Kaspersky Safe Kids, Kaspersky Anti-Ransomware Tool that could allow an authenticated attacker to write data to a limited area outside the allocated kernel memory buffer. The fix was installed automatically for all Kaspersky Endpoint products.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
整数溢出或超界折返
Source: CVE Program / CVE List V5
Vulnerability Title
Kaspersky多款产品 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Kaspersky Anti-Virus等都是俄罗斯卡巴斯基（Kaspersky）实验室的产品。Kaspersky Anti-Virus是一套杀毒软件。Kaspersky Internet Security是一套同时具有反病毒和防火墙功能的安全软件。ESET Internet Security等都是斯洛伐克ESET公司的产品。Internet Security是一套针对互联网安全的杀毒软件。Kaspersky Anti-Ransomware Tool是一个可为计算机提供反勒索功能的安全软件。Kaspers
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Kaspersky | Kaspersky Anti-Virus SDK for Windows | 8.10.1.1943 ~ 8.10.1.1943 | - |
|
| Kaspersky | Kaspersky Security for Virtualization Light Agent | 5.2 ~ 5.2.27.319 | - |
|
| Kaspersky | Kaspersky Endpoint Security for Windows | - | - |
|
| Kaspersky | Kaspersky Small Office Security | - | - |
|
| Kaspersky | Kaspersky for Windows (Standard, Plus, Premium) | - | - |
|
| Kaspersky | Kaspersky Free | - | - |
|
| Kaspersky | Kaspersky Anti-Virus | - | - |
|
| Kaspersky | Kaspersky Internet Security | - | - |
|
| Kaspersky | Kaspersky Security Cloud | - | - |
|
| Kaspersky | Kaspersky Safe Kids | - | - |
|
| Kaspersky | Kaspersky Anti-Ransomware Tool | - | - |
|
II. Public POCs for CVE-2024-13614
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-13614
请登录查看更多情报信息。
Vendor Advisories for CVE-2024-13614 (1)
-
List of Advisories vendor-advisory
IV. Related Vulnerabilities
V. Comments for CVE-2024-13614
No comments yet