Description
Kaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security for Virtualization Light Agent, Kaspersky Endpoint Security for Windows, Kaspersky Small Office Security, Kaspersky for Windows (Standard, Plus, Premium), Kaspersky Free, Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Security Cloud, Kaspersky Safe Kids, Kaspersky Anti-Ransomware Tool that could allow an authenticated attacker to write data to a limited area outside the allocated kernel memory buffer. The fix was installed automatically for all Kaspersky Endpoint products.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Kaspersky | Kaspersky Anti-Virus SDK for Windows | 8.10.1.1943 – ≤ 8.10.1.1943, 8.10.1.1943 CF – ≤ 8.10.1.1943 CF | — |
| Kaspersky | Kaspersky Security for Virtualization Light Agent | 5.2 – < 5.2.27.319 | 5.2.27.319 |
| Kaspersky | Kaspersky Endpoint Security for Windows | — | — |
| Kaspersky | Kaspersky Small Office Security | — | — |
| Kaspersky | Kaspersky for Windows (Standard, Plus, Premium) | — | — |
| Kaspersky | Kaspersky Free | — | — |
| Kaspersky | Kaspersky Anti-Virus | — | — |
| Kaspersky | Kaspersky Internet Security | — | — |
| Kaspersky | Kaspersky Security Cloud | — | — |
| Kaspersky | Kaspersky Safe Kids | — | — |
| Kaspersky | Kaspersky Anti-Ransomware Tool | — | — |
Advisories 1
- WID-SEC-2025-0293 Kaspersky Anti-Virus: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Feb 6, 2025
References
- Advisory issued on February 6, 2025 vendor-advisory