Security Advisory

CVE-2016-4307

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2017-01-06 21:00:00
Last updated 2024-08-06 00:25:14
Assigner certcc
State PUBLISHED

Description

A denial of service vulnerability exists in the IOCTL handling functionality of Kaspersky Internet Security KL1 driver. A specially crafted IOCTL signal can cause an access violation in KL1 kernel driver resulting in local system denial of service. An attacker can run a program from user-mode to trigger this vulnerability.