CVE-2009-4114
published 2009-11-30CVE-2009-4114: kl1.sys in Kaspersky Anti-Virus 2010 9.0.0.463, and possibly other versions before 9.0.0.736, does not properly validate input to IOCTL 0x0022c008, which…
PriorityP418medium4.9CVSS 2.0
AVLACLAuNCNINAC
EXPLOIT
EPSS
0.83%
53.1th percentile
kl1.sys in Kaspersky Anti-Virus 2010 9.0.0.463, and possibly other versions before 9.0.0.736, does not properly validate input to IOCTL 0x0022c008, which allows local users to cause a denial of service (system crash) via IOCTL requests using crafted kernel addresses that trigger memory corruption, possibly related to klavemu.kdl.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| kaspersky | kaspersky_anti-virus | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://osvdb.org/60207http://secunia.com/advisories/37398http://sysdream.com/article.php?story_id=323§ion_id=78http://www.securityfocus.com/archive/1/507933/100/0/threadedhttp://www.securityfocus.com/bid/37044http://www.securitytracker.com/id?1023198http://www.vupen.com/english/advisories/2009/3286https://exchange.xforce.ibmcloud.com/vulnerabilities/54309http://osvdb.org/60207http://secunia.com/advisories/37398http://sysdream.com/article.php?story_id=323§ion_id=78http://www.securityfocus.com/archive/1/507933/100/0/threadedhttp://www.securityfocus.com/bid/37044http://www.securitytracker.com/id?1023198http://www.vupen.com/english/advisories/2009/3286https://exchange.xforce.ibmcloud.com/vulnerabilities/54309
2009-11-30
Published