Denial of service vulnerability in Kaspersky products

Description

Vulnerability was found in the IOCTL handling functionality of Kaspersky Internet Security KL1 driver in Kaspersky products. By exploiting this vulnerability malicious users can cause an access violation and a denial of service as a result. This vulnerability can be exploited locally via a specialy designed IOCTL signal.

---

Technical details

Vulnerability can be exploited only in case machine already contains a malicious program.

Original advisories

• Kaspersky Lab Advisory

Related products

• Kaspersky-Internet-Security
• Kaspersky-Anti-Virus

CVE list

• CVE-2016-4307
  warning

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com