OSVDB ID: 64833 Title: Kingsoft WebShield KAVSafe.sys IOCTL Handling Memory Corruption |
Info |
|
|
Dates |
||||
|
|
Description |
KAVSafe.sys 2010.4.14.609 and earlier, as used in Kingsoft Webshield 3.5.1.2 and earlier contains a flaw that may allow an attacker to gain access to unauthorized privileges. The issue is triggered when an error in the KAVSafe.sys driver occurs, allowing a local attacker to corrupt kernel memory and allow the attacker to gain system privileges in order to execute arbitrary code via a specially crafted 830020D4h IOCTL. |
Classification |
Location:
Local Access Required
Attack Type: Input Manipulation Impact: Loss of Integrity Solution: Solution Unknown Exploit: Exploit Public Disclosure: Vendor Verified, Uncoordinated Disclosure |
Solution |
Upgrade to the latest version, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
Credit |
Unknown or Incomplete |