CVE-2007-1281: Kaspersky Lab Kaspersky Antivirus Engine

High severity, CVSS 7.8. EPSS: 3% chance of exploitation in the next 30 days.

Kaspersky AntiVirus Engine 6.0.1.411 for Windows and 5.5-10 for Linux allows remote attackers to cause a denial of service (CPU consumption) via a crafted UPX compressed file with a negative offset, which triggers an infinite loop during decompression.

Affected products

• Kaspersky Lab Kaspersky Antivirus Engine: version 6.0.1.411 only; version 5.5.10 only

Published 2007-03-06. Last modified 2026-06-16.