CVE-2007-1112: Kaspersky Anti-Virus 6.0 and Internet Security 6.0 exposes unsafe methods in the (a) AXKLPROD60Lib.KAV60Inf...

Security readout for executives and security teams

This is an old Kaspersky client-side issue. Kaspersky Anti-Virus 6.0 and Internet Security 6.0 exposed ActiveX methods that could let a remote attacker cause arbitrary file download or deletion through crafted inputs. It matters mainly for legacy endpoints where those products and controls still exist. Exposure is most likely on legacy Windows endpoints that still have Kaspersky Anti-Virus 6.0 or Internet Security 6.0 and the named ActiveX controls installed or reachable. Modern supported deployments are not identified as affected in the provided sources. Treat this as a legacy-risk cleanup item with high impact if found. It should not distract from actively exploited vulnerabilities unless affected Kaspersky 6.0 systems remain in production or sensitive environments. Mitigation focus: Check Kaspersky’s advisory for the official remediation path.; Remove or retire Kaspersky Anti-Virus 6.0 and Internet Security 6.0 deployments.; Disable or remove the named ActiveX controls where still present..

Prepared

Jun 29, 2026, 06:24 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.