App Review Kill Kaspersky Internet Security 20.0

It is advised to take all reviews with a grain of salt. In extreme cases some reviews use dramatization for entertainment purposes.
Interesting... anyway some questions about the video:


  • We don't have any info about that application executed (is it malware? a POC?) is it digitally signed? if so, Kaspersky in default settings will allow execution without any limitations... but Kaspersky Autoprotection shouldn't have been surpassed, so probably some kind of bug :unsure:

  • We can tweak our KIS/KTS to be prompted (only in Interactive Mode) if some application trying to shutdown the system, or set to block the shutdown for applications in Low Restricted (Auto Mode -> Default):

1584170404681.png 1584170591207.png
 
Last edited:
Can you share or send file for testing and inspection ? I looked under the video but I couldn't see.

Patch I for Kaspersky Internet Security version 20.0.14.1085 was released on February 18, 2020.
Patch H for Kaspersky Internet Security version 20.0.14.1085 was released on February 4, 2020.
 
Last edited:
Can you share or send file for testing and inspection ? I looked under the video but I couldn't see.

Patch I for Kaspersky Internet Security version 20.0.14.1085 was released on February 18, 2020.
Patch H for Kaspersky Internet Security version 20.0.14.1085 was released on February 4, 2020.
I am not the owner of the video.
 
...
We don't have any info about that application executed (is it malware? a POC?)
...
It is a POC that exploited the bug in KIS. Nothing to worry about, such bugs exists in any AV and are very quickly patched.
 
Last edited:
I liked your post because of the rhyme. :)
But seriously, I have some spare time to seek information.
I was curious because Kaspersky has very good self-protection.
Anyway, all AVs have many bugs yet to be discovered in the BUG Bounty. That is normal.
 
Last edited: