CVE-2009-4114

Currently unrated

Key Information:

Vendor
Kaspersky
Status
Kaspersky Anti-virus
Vendor
CVE Published:
30 November 2009

Summary

kl1.sys in Kaspersky Anti-Virus 2010 9.0.0.463, and possibly other versions before 9.0.0.736, does not properly validate input to IOCTL 0x0022c008, which allows local users to cause a denial of service (system crash) via IOCTL requests using crafted kernel addresses that trigger memory corruption, possibly related to klavemu.kdl.

References

http://sysdream.com/article.php?story_id=323&section_id=78
x_refsource_MISC
http://www.vupen.com/english/advisories/2009/3286
vdb-entryx_refsource_VUPEN
http://osvdb.org/60207
vdb-entryx_refsource_OSVDB

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.