Kaspersky Anti-Virus SDK for Windows integer overflow

Summaryinfo

A vulnerability classified as problematic was found in Kaspersky Anti-Virus SDK for Windows, Security for Virtualization Light Agent, Endpoint Security for Windows, Small Office Security, for Windows Standard, Plus, Premium, Free, Anti-Virus, Internet Security, Security Cloud, Safe Kids and Anti-Ransomware Tool. This affects an unknown part. Executing a manipulation can lead to integer overflow. This vulnerability appears as CVE-2024-13614. The attack requires local access. There is no available exploit. Upgrading the affected component is advised.

Detailsinfo

A vulnerability classified as problematic was found in Kaspersky Anti-Virus SDK for Windows, Security for Virtualization Light Agent, Endpoint Security for Windows, Small Office Security, for Windows Standard, Plus, Premium, Free, Anti-Virus, Internet Security, Security Cloud, Safe Kids and Anti-Ransomware Tool. This vulnerability affects an unknown function. The manipulation with an unknown input leads to a integer overflow vulnerability. The CWE definition for the vulnerability is CWE-190. The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control. As an impact it is known to affect integrity, and availability. CVE summarizes:

Kaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security for Virtualization Light Agent, Kaspersky Endpoint Security for Windows, Kaspersky Small Office Security, Kaspersky for Windows (Standard, Plus, Premium), Kaspersky Free, Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Security Cloud, Kaspersky Safe Kids, Kaspersky Anti-Ransomware Tool that could allow an authenticated attacker to write data to a limited area outside the allocated kernel memory buffer. The fix was installed automatically for all Kaspersky Endpoint products.

The weakness was presented by Florian Schweins. The advisory is shared for download at support.kaspersky.com. This vulnerability was named CVE-2024-13614 since 01/22/2025. The exploitation appears to be difficult. The attack needs to be approached locally. There are neither technical details nor an exploit publicly available.

Upgrading eliminates this vulnerability.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Virtualization Software

Vendor

• Kaspersky

Name

• Anti-Ransomware Tool
• Anti-Virus
• Anti-Virus SDK for Windows
• Endpoint Security for Windows
• for Windows Standard
• Free
• Internet Security
• Plus
• Premium
• Safe Kids
• Security Cloud
• Security for Virtualization Light Agent
• Small Office Security

License

• commercial

Website

• Vendor: https://www.kaspersky.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion