This script is Copyright (C) 2007-2016 Tenable Network Security, Inc.
The remote Windows host has an ActiveX control that is affected by a
format string vulnerability.
The remote host contains the Kaspersky Online Scanner, an online virus
scanner for Windows.
The version of the Kaspersky Web Scanner ActiveX control installed as
part of this software on the remote host contains a format string
vulnerability. By tricking a user on the affected host into visiting
a specially crafted web page, an attacker may be able to use this
method to execute arbitrary code on the affected system subject to the
See also :
Upgrade to Kaspersky Online Scanner version 22.214.171.124 or later.
Risk factor :
High / CVSS Base Score : 9.3
CVSS Temporal Score : 6.9
Public Exploit Available : false