Denial of Service and Privilege Escalation in Kaspersky Internet Security

CVE-2007-5043

Summary

Kaspersky Internet Security 7.0.0.125 is affected by a vulnerability due to improper parameter validation in certain SSDT function handlers. This flaw allows local users to trigger a denial of service by crashing the system or causing service outages in the avp.exe service. Additionally, there is a risk of potential privilege escalation via the NtCreateSection SSDT hook. This issue represents a significant risk as it could allow unauthorized access or disruptions in critical security functions.

References