OSVDB ID: 33851 Title: Kaspersky Multiple Products klif.sys Local Overflow |
Info |
|
|
Dates |
||||
|
|
Description |
A local overflow exists in Kaspersky Anti-Virus. The_NtSetValueKey() function in the klif.sys file fails to properly parse the data size argument resulting in a kernel heap overflow. With a specially crafted request, an attacker can cause corruption of kernel memory and may let an attacker overwrite a nearly arbitrary amount of kernel heap memory with arbitrary data resulting in a loss of integrity. |
Classification |
Location:
Local Access Required
Attack Type: Input Manipulation Impact: Loss of Integrity Exploit: Exploit Private Disclosure: OSVDB Verified OSVDB: Security Software |
Solution |
Upgrade to version 6.0.2.614 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |