Skip to content
OpenAdvisories
Unscored CVE-2016-4307 EUVD-2016-5307GHSA-278p-2ghg-cvch

A denial of service vulnerability exists in the IOCTL handling functionality of Kaspersky Internet Security KL1 driver. A specially crafted…

Published Jan 6, 2017 · Updated Aug 6, 2024 · Assigned by certcc

Vendor: Kaspersky Product: Internet Security

Description

A denial of service vulnerability exists in the IOCTL handling functionality of Kaspersky Internet Security KL1 driver. A specially crafted IOCTL signal can cause an access violation in KL1 kernel driver resulting in local system denial of service. An attacker can run a program from user-mode to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
Kaspersky Internet Security 16.0.0, KLIF driver version 10.0.0.1532 —

References