Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2006-3074
HistoryJun 19, 2006 - 10:02 a.m.

CVE-2006-3074

2006-06-1910:02:00
CWE-119
[email protected]
web.nvd.nist.gov
24
kaspersky
internet security
anti-virus
cve
2006
3074
ntcreatekey
ntcreateprocess
ntcreateprocessex
ntcreatesection
ntcreatesymboliclinkobject
ntcreatethread
ntdeletevaluekey
ntloadkey2
ntopenkey
ntopenprocess
ntopensection
ntqueryvaluekey
denial of service

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.3

Confidence

High

EPSS

0.012

Percentile

85.4%

JSON

klif.sys in Kaspersky Internet Security 6.0 and 7.0, Kaspersky Anti-Virus (KAV) 6.0 and 7.0, KAV 6.0 for Windows Workstations, and KAV 6.0 for Windows Servers does not validate certain parameters to the (1) NtCreateKey, (2) NtCreateProcess, (3) NtCreateProcessEx, (4) NtCreateSection, (5) NtCreateSymbolicLinkObject, (6) NtCreateThread, (7) NtDeleteValueKey, (8) NtLoadKey2, (9) NtOpenKey, (10) NtOpenProcess, (11) NtOpenSection, and (12) NtQueryValueKey hooked system calls, which allows local users to cause a denial of service (reboot) via an invalid parameter, as demonstrated by the ClientId parameter to NtOpenProcess.

Affected configurations

NVD
Node
kasperskykaspersky_anti-virusMatch6.0
OR
kasperskykaspersky_anti-virusMatch7.0
OR
kasperskykaspersky_internet_securityMatch6.0
OR
kasperskykaspersky_internet_securityMatch7.0
Node
kasperskykaspersky_anti-virusMatch6.0
AND
microsoftwindows
OR
microsoftwindows_server
VendorProductVersionCPE
kasperskykaspersky_anti-virus6.0cpe:/a:kaspersky:kaspersky_anti-virus:6.0:::
kasperskykaspersky_internet_security7.0cpe:/a:kaspersky:kaspersky_internet_security:7.0:::
kasperskykaspersky_internet_security6.0cpe:/a:kaspersky:kaspersky_internet_security:6.0:::
kasperskykaspersky_anti-virus7.0cpe:/a:kaspersky:kaspersky_anti-virus:7.0:::

Related

nvd 2
cvelist 2
prion 1
cve 1
nvd
nvd
CVE-2006-3074
2006-06-19 10:02:00
CVE-2007-5043
2007-09-24 00:17:00
cvelist
cvelist
CVE-2006-3074
2006-06-19 10:00:00
CVE-2007-5043
2007-09-24 00:00:00
prion
prion
Code injection
2007-09-24 00:17:00
cve
cve
CVE-2007-5043
2007-09-24 00:17:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.3

Confidence

High

EPSS

0.012

Percentile

85.4%

JSON
Related for CVE-2006-3074
nvd2cvelist2prion1cve1