The Kaspersky Antivirus Library provides file format support for virus analysis. During analysis of cab files, Kaspersky is vulnerable to a heap overflow allowing attackers complete control of the system(s) being protected. This vulnerability can be exploited remotely without user interaction in default configurations through common protocols such as SMTP, SMB, HTTP, and FTP.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/40439/kaspersky.pdf
Source: https://packetstormsecurity.com/files/40439/kaspersky.pdf.html