Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2009-4114

CWE-20 — Improper Input Validation4 documents4 sources
Severity
4.9MEDIUM
EPSS
0.6%
top 29.22%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Kaspersky Kaspersky Anti-virus
Timeline
PublishedNov 30
Latest updateMay 2

Description

kl1.sys in Kaspersky Anti-Virus 2010 9.0.0.463, and possibly other versions before 9.0.0.736, does not properly validate input to IOCTL 0x0022c008, which allows local users to cause a denial of service (system crash) via IOCTL requests using crafted kernel addresses that trigger memory corruption, possibly related to klavemu.kdl.

CVSS vector

AV:L/AC:L/C:N/I:N/A:CExploitability: 3.9 | Impact: 6.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-wf7h-q67q-wp22: kl1↗2022-05-02
▶
CVEList
CVE-2009-4114: kl1↗2009-11-30
▶

💥Exploits & PoCs

1
Exploit-DB
Kaspersky AV 2010 9.0.0.463 - Local Denial of Service↗2009-09-29
▶
CVE-2009-4114 (MEDIUM CVSS 4.9) | kl1.sys in Kaspersky Anti-Virus 201 | cvebase.io