Heap Overflow in Kaspersky Anti-Virus Products Due to Integer Overflow in klif.sys

CVE-2007-1880

Summary

The vulnerability arises from an integer overflow in the _NtSetValueKey function within klif.sys, affecting Kaspersky Anti-Virus and Internet Security products. This flaw permits an attacker to craft a malicious request with an excessively large, unsigned data size argument. As a result, this can lead to a heap overflow, enabling the execution of arbitrary code. The issue is present in versions prior to Maintenance Pack 2 build 6.0.2.614, potentially exposing users to security risks if unaddressed.

References