CVE-2020-28950: High severity kaspersky anti-ransomware tool vulnerability
Published Dec 4, 2020
·Updated
The installer of Kaspersky Anti-Ransomware Tool (KART) prior to KART 4.0 Patch C was vulnerable to a DLL hijacking attack that allowed an attacker to elevate privileges during installation process.
Affected Software
2 affected components
Kaspersky Anti-Ransomware Tool<4.0
Kaspersky Anti-Ransomware Tool=4.0-patch_c
Event History
Dec 4, 2020
CVE Published
via MITRE·09:11 PM
Data Sourced
via MITRE·09:11 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-28950?
CVE-2020-28950 is classified as a medium severity vulnerability due to its potential for privilege escalation during installation.
2
How do I fix CVE-2020-28950?
To fix CVE-2020-28950, upgrade to Kaspersky Anti-Ransomware Tool version 4.0 Patch C or later.
3
What type of attack does CVE-2020-28950 involve?
CVE-2020-28950 involves a DLL hijacking attack that enables attackers to gain elevated privileges.
4
Which versions of Kaspersky Anti-Ransomware Tool are affected by CVE-2020-28950?
Kaspersky Anti-Ransomware Tool versions prior to 4.0 Patch C are vulnerable to CVE-2020-28950.
5
Who is impacted by CVE-2020-28950?
Users of Kaspersky Anti-Ransomware Tool prior to version 4.0 Patch C are at risk from CVE-2020-28950.