CVEvulnerability

CVE-2007-0125

5.0 MEDIUM Published 2007-01-09 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2007-01-09
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

Kaspersky Labs Antivirus Engine 6.0 for Windows and 5.5-10 for Linux before 20070102 enter an infinite loop upon encountering an invalid NumberOfRvaAndSizes value in the Optional Windows Header of a portable executable (PE) file, which allows remote attackers to cause a denial of service (CPU consumption) by scanning a crafted PE file.

Affected configurations

• kaspersky lab kaspersky antivirus engine 5.5.10 • kaspersky lab kaspersky antivirus engine 6.0

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=459 Vendor Advisory
http://osvdb.org/32588 osvdb.org
http://secunia.com/advisories/23575 Vendor Advisory
http://securitytracker.com/id?1017476 securitytracker.com
http://www.securityfocus.com/bid/21901 www.securityfocus.com
http://www.vupen.com/english/advisories/2007/0067 www.vupen.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/31315 exchange.xforce.ibmcloud.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=459 Vendor Advisory
http://osvdb.org/32588 osvdb.org
http://secunia.com/advisories/23575 Vendor Advisory
http://securitytracker.com/id?1017476 securitytracker.com
http://www.securityfocus.com/bid/21901 www.securityfocus.com
http://www.vupen.com/english/advisories/2007/0067 www.vupen.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/31315 exchange.xforce.ibmcloud.com