CVEvulnerability

CVE-2007-1880

6.6 MEDIUM Published 2007-04-06 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-04-06
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.6 MEDIUM — AV:L/AC:M/Au:S/C:C/I:C/A:C

Description

Integer overflow in the _NtSetValueKey function in klif.sys in Kaspersky Anti-Virus, Anti-Virus for Workstations, Anti-Virus for File Server 6.0, and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows context-dependent attackers to execute arbitrary code via a large, unsigned "data size argument," which results in a heap overflow.

Affected configurations

• kaspersky lab kaspersky anti-virus (<= 6.0) • kaspersky lab kaspersky anti-virus 6.0 • kaspersky lab kaspersky internet security (<= 6.0.1.411)

References