4.9

CVE-2009-4114

Exploit
kl1.sys in Kaspersky Anti-Virus 2010 9.0.0.463, and possibly other versions before 9.0.0.736, does not properly validate input to IOCTL 0x0022c008, which allows local users to cause a denial of service (system crash) via IOCTL requests using crafted kernel addresses that trigger memory corruption, possibly related to klavemu.kdl.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Kaspersky ≫ Kaspersky Anti-virus Version9.0.0.463
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.83% 0.528
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.9 3.9 6.9
AV:L/AC:L/Au:N/C:N/I:N/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://osvdb.org/60207
http://secunia.com/advisories/37398
Vendor Advisory
http://sysdream.com/article.php?story_id=323&section_id=78
Exploit
http://www.securityfocus.com/archive/1/507933/100/0/threaded
http://www.securityfocus.com/bid/37044
Exploit
http://www.securitytracker.com/id?1023198
Exploit
http://www.vupen.com/english/advisories/2009/3286
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/54309