CVE-2007-1879 Information disclosure in n/a
Remote attackers can read arbitrary files by triggering an outbound FTP session via a vulnerable ActiveX control in Kaspersky Anti-Virus.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2007-1879?
CVE-2007-1879 is a critical vulnerability in n/a, published on 6 Apr 2007. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
The StartUploading function in KL.SysInfo ActiveX control (AxKLSysInfo.dll) in Kaspersky Anti-Virus 6.0 and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows remote attackers to read arbitrary files by triggering an outbound anonymous FTP session that invokes the PUT command. NOTE: this issue might be related to CVE-2007-1112.
Which versions are affected by CVE-2007-1879?
It affects 2 products.
Products include Kaspersky Lab Kaspersky Anti-Virus, Kaspersky Lab Kaspersky Internet Security.
How do I fix CVE-2007-1879?
No fix has been published for CVE-2007-1879 yet. Limit exposure of the affected software until one is available.
Is CVE-2007-1879 being exploited?
There is no known exploitation of CVE-2007-1879 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-6h47-3rcf-qqpq.