CVE-2007-0125: Medium severity Kaspersky Lab Kaspersky Antivirus Engine vulnerability
Kaspersky Labs Antivirus Engine 6.0 for Windows and 5.5-10 for Linux before 20070102 enter an infinite loop upon encountering an invalid NumberOfRvaAndSizes value in the Optional Windows Header of a portable executable (PE) file, which allows remote attackers to cause a denial of service (CPU consumption) by scanning a crafted PE file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-0125?
CVE-2007-0125 is classified as a denial of service vulnerability, which can lead to significant resource consumption on affected systems.
How do I fix CVE-2007-0125?
To address CVE-2007-0125, users should update their Kaspersky Antivirus Engine to the latest version that resolves this issue.
Which software versions are affected by CVE-2007-0125?
CVE-2007-0125 affects Kaspersky Antivirus Engine versions 5.5-10 for Linux and 6.0 for Windows.
What type of attack is associated with CVE-2007-0125?
CVE-2007-0125 allows remote attackers to trigger an infinite loop, resulting in denial of service.
What are the consequences of CVE-2007-0125?
The consequences of CVE-2007-0125 include excessive CPU usage, potentially leading to system unresponsiveness.