CVE-2007-1112 : Kaspersky Anti-Virus 6.0 and Internet Security 6.0 exposes unsafe methods in the

Kaspersky Anti-Virus 6.0 and Internet Security 6.0 exposes unsafe methods in the (a) AXKLPROD60Lib.KAV60Info (AxKLProd60.dll) and (b) AXKLSYSINFOLib.SysInfo (AxKLSysInfo.dll) ActiveX controls, which allows remote attackers to "download" or delete arbitrary files via crafted arguments to the (1) DeleteFile, (2) StartBatchUploading, (3) StartStrBatchUploading, or (4) StartUploading methods.

Published 2007-04-06 00:19:00

Updated 2025-04-09 00:30:58

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2007-1112

Kaspersky Lab » Kaspersky Anti-virus » Version: 6.0 Windows Workstation Edition
cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:6.0:*:windows_workstation:*:*:*:*:*
Matching versions
Kaspersky Lab » Kaspersky Internet Security » Version: 6.0 Update Maintenance Pack 2
cpe:2.3:a:kaspersky_lab:kaspersky_internet_security:6.0:maintenance_pack_2:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2007-1112

EPSS FAQ

3.45%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 86 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-1112

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

References for CVE-2007-1112

Jump to

Vulnerability Details : CVE-2007-1112

Products affected by CVE-2007-1112

Exploit prediction scoring system (EPSS) score for CVE-2007-1112

CVSS scores for CVE-2007-1112

References for CVE-2007-1112