CVEvulnerability
CVE-2006-3074
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-06-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-119
Description
klif.sys in Kaspersky Internet Security 6.0 and 7.0, Kaspersky Anti-Virus (KAV) 6.0 and 7.0, KAV 6.0 for Windows Workstations, and KAV 6.0 for Windows Servers does not validate certain parameters to the (1) NtCreateKey, (2) NtCreateProcess, (3) NtCreateProcessEx, (4) NtCreateSection, (5) NtCreateSymbolicLinkObject, (6) NtCreateThread, (7) NtDeleteValueKey, (8) NtLoadKey2, (9) NtOpenKey, (10) NtOpenProcess, (11) NtOpenSection, and (12) NtQueryValueKey hooked system calls, which allows local users to cause a denial of service (reboot) via an invalid parameter, as demonstrated by the ClientId parameter to NtOpenProcess.
Affected configurations
• kaspersky kaspersky anti-virus 6.0
• kaspersky kaspersky anti-virus 7.0
• kaspersky kaspersky internet security 6.0
• kaspersky kaspersky internet security 7.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/20629 Vendor Advisory
- http://secunia.com/advisories/25603 Vendor Advisory
- http://uninformed.org/index.cgi?v=4&a=4&p=4 uninformed.org
- http://uninformed.org/index.cgi?v=4&a=4&p=7 uninformed.org
- http://www.kaspersky.com/technews?id=203038695 www.kaspersky.com
- http://www.matousec.com/info/advisories/Kaspersky-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php www.matousec.com
- http://www.rootkit.com/board.php?did=edge726&closed=0&lastx=15 www.rootkit.com
- http://www.rootkit.com/newsread.php?newsid=726 www.rootkit.com
- http://www.securityfocus.com/archive/1/471453/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/18341 www.securityfocus.com
- http://www.securityfocus.com/bid/24491 www.securityfocus.com
- http://www.securitytracker.com/id?1018257 www.securitytracker.com
- http://www.vupen.com/english/advisories/2006/2333 Vendor Advisory
- http://www.vupen.com/english/advisories/2007/2145 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27104 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34875 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/20629 Vendor Advisory
- http://secunia.com/advisories/25603 Vendor Advisory
- http://uninformed.org/index.cgi?v=4&a=4&p=4 uninformed.org
- http://uninformed.org/index.cgi?v=4&a=4&p=7 uninformed.org
- http://www.kaspersky.com/technews?id=203038695 www.kaspersky.com
- http://www.matousec.com/info/advisories/Kaspersky-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php www.matousec.com
- http://www.rootkit.com/board.php?did=edge726&closed=0&lastx=15 www.rootkit.com
- http://www.rootkit.com/newsread.php?newsid=726 www.rootkit.com
- http://www.securityfocus.com/archive/1/471453/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/18341 www.securityfocus.com
- http://www.securityfocus.com/bid/24491 www.securityfocus.com
- http://www.securitytracker.com/id?1018257 www.securitytracker.com
- http://www.vupen.com/english/advisories/2006/2333 Vendor Advisory
- http://www.vupen.com/english/advisories/2007/2145 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27104 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34875 exchange.xforce.ibmcloud.com