CVE-2009-2966: Kaspersky Anti-Virus

Medium severity, CVSS 4.3. EPSS: 6.4% chance of exploitation in the next 30 days.

avp.exe in Kaspersky Internet Security 9.0.0.459 and Anti-Virus 9.0.0.463 allows remote attackers to cause a denial of service (CPU consumption and network connectivity loss) via an HTTP URL request that contains a large number of dot "." characters.

Affected products

• Kaspersky Kaspersky Anti-Virus: version 9.0.0.463 only
• Kaspersky Kaspersky Internet Security: version 9.0.0.459 only

Published 2009-08-25. Last modified 2026-06-16.