Lucene search

MitreCVE-2009-4114

HistoryNov 30, 2009 - 9:30 p.m.

CVE-2009-4114

2009-11-3021:30:00

CWE-20

mitre

web.nvd.nist.gov

kaspersky

anti-virus

2010

9.0.0.463

vulnerability

kl1.sys

cve-2009-4114

denial of service

memory corruption

nvd

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.2

Confidence

High

EPSS

Percentile

9.7%

JSON

kl1.sys in Kaspersky Anti-Virus 2010 9.0.0.463, and possibly other versions before 9.0.0.736, does not properly validate input to IOCTL 0x0022c008, which allows local users to cause a denial of service (system crash) via IOCTL requests using crafted kernel addresses that trigger memory corruption, possibly related to klavemu.kdl.

Affected configurations

Nvd

Node

kasperskykaspersky_anti-virusMatch9.0.0.463

VendorProductVersionCPE
kasperskykaspersky_anti-virus9.0.0.463cpe:2.3:a:kaspersky:kaspersky_anti-virus:9.0.0.463:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
kaspersky	kaspersky_anti-virus	9.0.0.463	cpe:2.3:a:kaspersky:kaspersky_anti-virus:9.0.0.463:::::::*

References

osvdb.org/60207

secunia.com/advisories/37398

sysdream.com/article.php?story_id=323&section_id=78

www.securityfocus.com/archive/1/507933/100/0/threaded

www.securityfocus.com/bid/37044

www.securitytracker.com/id?1023198

www.vupen.com/english/advisories/2009/3286

exchange.xforce.ibmcloud.com/vulnerabilities/54309

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.2

Confidence

High

EPSS

Percentile

9.7%

JSON

Related for CVE-2009-4114