CVE-2007-1112

Kaspersky Anti-Virus 6.0 and Internet Security 6.0 exposes unsafe methods in the (a) AXKLPROD60Lib.KAV60Info (AxKLProd60.dll) and (b) AXKLSYSINFOLib.SysInfo (AxKLSysInfo.dll) ActiveX controls, which allows remote attackers to "download" or delete arbitrary files via crafted arguments to the (1) DeleteFile, (2) StartBatchUploading, (3) StartStrBatchUploading, or (4) StartUploading methods.

• http://secunia.com/advisories/24778Patch, Vendor Advisory
• http://www.kaspersky.com/technews?id=203038694Patch
• http://www.securityfocus.com/archive/1/464882/100/0/threaded
• http://www.securityfocus.com/bid/23345
• http://www.securitytracker.com/id?1017884
• http://www.securitytracker.com/id?1017885
• http://www.vupen.com/english/advisories/2007/1268
• http://www.zerodayinitiative.com/advisories/ZDI-07-014.htmlVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33464
• http://secunia.com/advisories/24778Patch, Vendor Advisory
• http://www.kaspersky.com/technews?id=203038694Patch
• http://www.securityfocus.com/archive/1/464882/100/0/threaded
• http://www.securityfocus.com/bid/23345
• http://www.securitytracker.com/id?1017884
• http://www.securitytracker.com/id?1017885
• http://www.vupen.com/english/advisories/2007/1268
• http://www.zerodayinitiative.com/advisories/ZDI-07-014.htmlVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33464

Published

Apr 6, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-1106PHP remote file inclusion vulnerability in includes/function…
• CVE-2007-1107SQL injection vulnerability in thumbnails.php in Coppermine …
• CVE-2007-1108PHP remote file inclusion vulnerability in index.php in Chri…
• CVE-2007-1109Multiple cross-site scripting (XSS) vulnerabilities in Phpwe…
• CVE-2007-1110Directory traversal vulnerability in data/showcode.php in Ac…
• CVE-2007-1111Multiple cross-site scripting (XSS) vulnerabilities in Activ…
• CVE-2007-1114The child frames in Microsoft Internet Explorer 7 inherit th…
• CVE-2007-1115The child frames in Opera 9 before 9.20 inherit the default …
• CVE-2007-1116The CheckLoadURI function in Mozilla Firefox 1.8 lists the a…
• CVE-2007-1117Unspecified vulnerability in Publisher 2007 in Microsoft Off…
• CVE-2007-1118Multiple PHP remote file inclusion vulnerabilities in eFicti…
• CVE-2007-1119Unspecified vulnerability in Novell ZENworks 7 Desktop Manag…