CVE-2007-1112

no score yetEPSS 4.9%

Kaspersky Anti-Virus 6.0 and Internet Security 6.0 exposes unsafe methods in the (a) AXKLPROD60Lib.KAV60Info (AxKLProd60.dll) and (b) AXKLSYSINFOLib.SysInfo (AxKLSysInfo.dll) ActiveX controls, which allows remote attackers to "download" or delete arbitrary files via crafted arguments to the (1) DeleteFile, (2) StartBatchUploading, (3) StartStrBatchUploading, or (4) StartUploading methods.

EPSS: 4.9% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
Published: 2007-04-06
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

kaspersky_lab:kaspersky_anti-virus
kaspersky_lab:kaspersky_internet_security

References

http://secunia.com/advisories/24778
http://www.kaspersky.com/technews?id=203038694
http://www.securityfocus.com/archive/1/464882/100/0/threaded
http://www.securityfocus.com/bid/23345
http://www.securitytracker.com/id?1017884

Check your stack JSON