Kaspersky Update
3287Warning Date
Severity Level
Warning Number
Target Sector
25 November, 2019
● High
2019-651
All
Description:
Kaspersky has released security update to address multiple vulnerabilities in the following products:
- Kaspersky Anti-Virus up to 2020
- Kaspersky Internet Security up to 2020
- Kaspersky Security Cloud up to 2020
- Kaspersky Total Security up to 2020
- Kaspersky Protection extension for Google Chrome prior to 30.112.62.0
- Kaspersky Small Office Security up to 7
Threats:
Remote attacker could exploit these vulnerabilities by doing the following:
- Unauthorized access that could lead to removing other installed extensions on the browser.
- Disable such product's security features as private browsing and anti-banner.
- Redirect user to an untrusted site.
- Disclosure of some information about user's system.
- Denial of service attack (DoS).
Best practice and Recommendations:
The CERT team encourages users to update the affected versions and to review Kaspersky security advisory: https://support.kaspersky.com/general/vulnerability.aspx?el=12430#251119_1