Kaspersky.Internet.Security.Insecure.Certificate.Validation

Description

This indicates an attack attempt to exploit a Directory Traversal vulnerability in Kaspersky Internet Security.
The vulnerability is caused by an improper validation of user supplied data when the vulnerable application handles a maliciously crafted request. An attacker can exploit this to execute arbitrary code on the affected machine via a crafted request.

Affected Products

Kaspersky Labs Internet Security

Impact

System Compromise: Remote attackers can gain control of vulnerable systems

Recommended Actions

Currently we are unaware of any vendor supplied patch for this issue

References