CVE-2015-8579 - Kaspersky Total Security 2015 15.0.2.361 allocates memory with Read, Write, Execute (RWX) permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors

Back Back to CVE browser

MEDIUM

Kaspersky Total Security 2015 15.0.2.361 allocates memory with Read, Write, Execute (RWX) permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors

Published Dec 16, 2015

6.4

MEDIUM

CVSS 2.0

EPSS 1.49%

Description

Kaspersky Total Security 2015 15.0.2.361 allocates memory with Read, Write, Execute (RWX) permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (3)

http://blog.ensilo.com/the-av-vulnerability-that-bypasses-mitigations
x_refsource_MISC
http://breakingmalware.com/vulnerabilities/sedating-watchdog-abusing-security-products-bypass-mitigations/
x_refsource_MISCExploit
http://www.securityfocus.com/bid/78815
vdb-entryx_refsource_BID

Link	Providers	Tags
http://blog.ensilo.com/the-av-vulnerability-that-bypasses-mitigations		x_refsource_MISC
http://breakingmalware.com/vulnerabilities/sedating-watchdog-abusing-security-products-bypass-mitigations/		x_refsource_MISCExploit
http://www.securityfocus.com/bid/78815		vdb-entryx_refsource_BID

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 16, 2015

Updated Aug 6, 2024

Reserved Dec 16, 2015

Link CVE-2015-8579

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2015-8579

Red Hat

Severity n/a

Public date n/a

Links CVE-2015-8579