CVE-2003-1443: Kaspersky Antivirus (KAV) 4.0.9.0 does not detect viruses in files with MS-DOS device names in their filena...

Security readout for executives and security teams

This is an old Kaspersky Antivirus issue where KAV 4.0.9.0 could miss malicious files if their filenames used reserved MS-DOS device names. The business risk is mostly for legacy endpoints still running this product, where antivirus coverage may be bypassed by a local user or local process. Exposure is likely limited to legacy environments running Kaspersky Antivirus 4.0.9.0 or closely related unsupported deployments. The provided CVE data does not establish broader product impact. Treat this as a legacy hygiene issue unless the organization still runs KAV 4.0.9.0. If present, prioritize replacement because antivirus bypass undermines a core control, even though current exploitation evidence is not provided. Mitigation focus: Inventory endpoints for Kaspersky Antivirus 4.0.9.0 or unsupported KAV 4.x deployments.; Check Kaspersky vendor guidance for historical fixes or supported upgrade paths.; Replace unsupported antivirus versions with currently supported endpoint protection..

Prepared

Jun 29, 2026, 02:08 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.