Stack-Based Buffer Overflow in Kaspersky Anti-Virus and Internet Security Products

CVE-2008-1518

Summary

A stack-based buffer overflow vulnerability in the kl1.sys component of Kaspersky Anti-Virus and Internet Security allows local users to escalate privileges by executing the specific IOCTL call 0x800520e8. This flaw presents a significant risk as it can be exploited by users with local access to gain elevated permissions, potentially compromising the security of systems running affected software versions. Users are advised to update their Kaspersky products to mitigate the risk associated with this vulnerability.

References