Vulnerability Spotlight: Kaspersky Unhandled Windows Messages Denial of Service Vulnerability
Summary: Cisco Talos disclosed TALOS-2016-0175 / CVE-2016-4329, a local denial of service vulnerability in Kaspersky anti-virus in which a user already present on the system can run malicious code that kills the avpui.exe process protected by Kaspersky Self-Protection. Talos said the flaw could let a malicious user stop anti-virus scanning from informing users about potential malicious activity, possibly as one step in a longer sequence, and recommended administrators install the latest Kaspersky version; Snort rules 39918 and 39919 detect exploitation attempts.
Key Takeaway: The exploit requires only an existing user account, so anyone who already has a foothold on a machine can silence the avpui.exe process that warns about malicious activity, clearing the way for whatever comes next.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2016-4329
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026