CVE-2024-13614

Summary

Kaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security for Virtualization Light Agent, Kaspersky Endpoint Security for Windows, Kaspersky Small Office Security, Kaspersky for Windows (Standard, Plus, Premium), Kaspersky Free, Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Security Cloud, Kaspersky Safe Kids, Kaspersky Anti-Ransomware Tool that could allow an authenticated attacker to write data to a limited area outside the allocated kernel memory buffer. The fix was installed automatically for all Kaspersky Endpoint products.

Affected Software

VendorProductVersion RangeStatus
KasperskyKaspersky Anti-Virus SDK for Windows8.10.1.1943 <= 8.10.1.1943affected
KasperskyKaspersky Anti-Virus SDK for Windows8.10.1.1943 CF <= 8.10.1.1943 CFaffected
KasperskyKaspersky Security for Virtualization Light Agent5.2 < 5.2.27.319affected
KasperskyKaspersky Security for Virtualization Light Agent5.2.27.319 <= 5.2.27.319unknown

Weaknesses

  • CWE-190: CWE-190: Integer Overflow or Wraparound

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References