CVE-2006-3074
Published Jun 19, 2006
Last updated 6 years ago
Overview
- Description
- klif.sys in Kaspersky Internet Security 6.0 and 7.0, Kaspersky Anti-Virus (KAV) 6.0 and 7.0, KAV 6.0 for Windows Workstations, and KAV 6.0 for Windows Servers does not validate certain parameters to the (1) NtCreateKey, (2) NtCreateProcess, (3) NtCreateProcessEx, (4) NtCreateSection, (5) NtCreateSymbolicLinkObject, (6) NtCreateThread, (7) NtDeleteValueKey, (8) NtLoadKey2, (9) NtOpenKey, (10) NtOpenProcess, (11) NtOpenSection, and (12) NtQueryValueKey hooked system calls, which allows local users to cause a denial of service (reboot) via an invalid parameter, as demonstrated by the ClientId parameter to NtOpenProcess.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
- nvd@nist.gov
- CWE-119
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:kaspersky:kaspersky_anti-virus:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F8015458-2645-482D-A0D3-B08B73655E06"
},
{
"criteria": "cpe:2.3:a:kaspersky:kaspersky_anti-virus:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A85D0F7D-B2F5-49D2-9CA8-1B02A4A72872"
},
{
"criteria": "cpe:2.3:a:kaspersky:kaspersky_internet_security:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "016D3A82-25B8-433E-B159-DC8EBBF68733"
},
{
"criteria": "cpe:2.3:a:kaspersky:kaspersky_internet_security:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CF832371-8A92-4FF6-BB6E-AECB2E5CE7E2"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:kaspersky:kaspersky_anti-virus:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F8015458-2645-482D-A0D3-B08B73655E06"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BDA0CCC0-F2BE-4AF8-844E-CEA1B276792D"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]