iDefense Security Advisory 10.10.07 – Remote exploitation of a format string vulnerability in Kaspersky Lab’s Online Scanner virus scanner service could allow an attacker to execute arbitrary code within the security context of the targeted user. iDefense has confirmed the existence of this vulnerability within version 5.0.93.0 of Kaspersky Lab’s kavwebscan.dll. Previous versions are suspected to be vulnerable.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/60002/10.10.07-1.txt
Source: https://packetstormsecurity.com/files/60002/iDEFENSE-Security-Advisory-2007-10-10.1.html