« Volver al listado

CVE-2024-13614

Estado: AplazadaMedia (5.3)—

Kaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security for Virtualization Light Agent, Kaspersky Endpoint Security for Windows, Kaspersky Small Office Security, Kaspersky for Windows (Standard, Plus, Premium), Kaspersky Free, Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Security Cloud, Kaspersky Safe Kids, Kaspersky Anti-Ransomware Tool that could allow an authenticated attacker to write data to a limited area outside the allocated kernel memory buffer. The fix was installed automatically for all Kaspersky Endpoint products.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (13)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Kaspersky — Anti-ransomware ToolAIKaspersky — Anti-virusAIKaspersky — Anti-virus SDK FOR WindowsAIKaspersky — Endpoint Security FOR WindowsAIKaspersky — FOR Windows PlusAIKaspersky — FOR Windows PremiumAIKaspersky — FOR Windows StandardAIKaspersky — FreeAIKaspersky — Internet SecurityAIKaspersky — Safe KidsAIKaspersky — Security CloudAIKaspersky — Security FOR Virtualization Light AgentAIKaspersky — Small Office SecurityAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-13614",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-13614",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-02-06T16:34:12.660585Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "vulnerability@kaspersky.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.3,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 4.2,
        "exploitabilityScore": 1
      }
    ]
  },
  "affected": [
    {
      "source": "vulnerability@kaspersky.com",
      "affectedData": [
        {
          "vendor": "Kaspersky",
          "product": "Kaspersky Anti-Virus SDK for Windows",
          "versions": [
            {
              "status": "affected",
              "version": "8.10.1.1943",
              "versionType": "custom",
              "lessThanOrEqual": "8.10.1.1943"
            },
            {
              "status": "affected",
              "version": "8.10.1.1943 CF",
              "versionType": "custom",
              "lessThanOrEqual": "8.10.1.1943 CF"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Kaspersky",
          "product": "Kaspersky Security for Virtualization Light Agent",
          "versions": [
            {
              "status": "affected",
              "version": "5.2",
              "lessThan": "5.2.27.319",
              "versionType": "custom"
            },
            {
              "status": "unknown",
              "version": "5.2.27.319",
              "versionType": "custom",
              "lessThanOrEqual": "5.2.27.319"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Kaspersky",
          "product": "Kaspersky Endpoint Security for Windows",
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Kaspersky",
          "product": "Kaspersky Small Office Security",
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Kaspersky",
          "product": "Kaspersky for Windows (Standard, Plus, Premium)",
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Kaspersky",
          "product": "Kaspersky Free",
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Kaspersky",
          "product": "Kaspersky Anti-Virus",
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Kaspersky",
          "product": "Kaspersky Internet Security",
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Kaspersky",
          "product": "Kaspersky Security Cloud",
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Kaspersky",
          "product": "Kaspersky Safe Kids",
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Kaspersky",
          "product": "Kaspersky Anti-Ransomware Tool",
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2025-02-06T17:15:18.080",
  "references": [
    {
      "url": "https://support.kaspersky.com/vulnerability/list-of-advisories/12430#060225",
      "source": "vulnerability@kaspersky.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "vulnerability@kaspersky.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-190"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Kaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security for Virtualization Light Agent, Kaspersky Endpoint Security for Windows, Kaspersky Small Office Security, Kaspersky for Windows (Standard, Plus, Premium), Kaspersky Free, Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Security Cloud, Kaspersky Safe Kids, Kaspersky Anti-Ransomware Tool that could allow an authenticated attacker to write data to a limited area outside the allocated kernel memory buffer. The fix was installed automatically for all Kaspersky Endpoint products."
    },
    {
      "lang": "es",
      "value": "Kaspersky ha corregido un problema de seguridad en Kaspersky Anti-Virus SDK para Windows, Kaspersky Security for Virtualization Light Agent, Kaspersky Endpoint Security para Windows, Kaspersky Small Office Security, Kaspersky para Windows (Standard, Plus, Premium), Kaspersky Free, Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Security Cloud, Kaspersky Safe Kids y Kaspersky Anti-Ransomware Tool que podía permitir que un atacante autenticado escribiera datos en un área limitada fuera del búfer de memoria del núcleo asignado. La corrección se instaló automáticamente para todos los productos Kaspersky Endpoint."
    }
  ],
  "lastModified": "2026-06-17T07:02:22.480",
  "sourceIdentifier": "vulnerability@kaspersky.com"
}