CVE-2007-1281
Kaspersky AntiVirus Engine 6.0.1.411 for Windows and 5.5-10 for Linux allows remote attackers to...
Kaspersky AntiVirus Engine 6.0.1.411 for Windows and 5.5-10 for Linux allows remote attackers to cause a denial of service (CPU consumption) via a crafted UPX compressed file with a negative offset, which triggers an infinite loop during decompression.
Exploit likelihood
What each source reports
NVD Score used
Kaspersky AntiVirus Engine 6.0.1.411 for Windows and 5.5-10 for Linux allows remote attackers to cause a denial of service (CPU consumption) via a crafted UPX compressed file with a negative offset, which triggers an infinite loop during decompression.
- Record
CVE-2007-1281- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Updated
- 2026-11-02
CVE List No score
Kaspersky AntiVirus Engine 6.0.1.411 for Windows and 5.5-10 for Linux allows remote attackers to cause a denial of service (CPU consumption) via a crafted UPX compressed file with a negative offset, which triggers an infinite loop during decompression.
- Record
CVE-2007-1281- Updated
- 2026-11-02
EUVDEUVD-2007-1278 No score
Kaspersky AntiVirus Engine 6.0.1.411 for Windows and 5.5-10 for Linux allows remote attackers to cause a denial of service (CPU consumption) via a crafted UPX compressed file with a negative offset, which triggers an infinite loop during decompression.
- Record
EUVD-2007-1278- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9j92-f5cx-hxq6 No score
Kaspersky AntiVirus Engine 6.0.1.411 for Windows and 5.5-10 for Linux allows remote attackers to...
Kaspersky AntiVirus Engine 6.0.1.411 for Windows and 5.5-10 for Linux allows remote attackers to cause a denial of service (CPU consumption) via a crafted UPX compressed file with a negative offset, which triggers an infinite loop during decompression.
- Record
GHSA-9j92-f5cx-hxq6- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-1281 is a high vulnerability (CVSS 7.8) in Kaspersky Lab Antivirus Engine, published March 6, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.01%, the 87th percentile. No source names a fixed version.
References
secunia.com/advisories/24391
exchange.xforce.ibmcloud.com/vulnerabilities/32797
securitytracker.com/id?1017718
securityfocus.com/bid/22795
labs.idefense.com/intelligence/vulnerabilities/display.php?id=485
vupen.com/english/advisories/2007/0810
nvd.nist.gov/vuln/detail/CVE-2007-1281
github.com/advisories/GHSA-9j92-f5cx-hxq6