CVE-2008-1518

2008-06-0520:32:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2008-1518

buffer overflow

kl1.sys

kaspersky anti-virus

privilege escalation

nvd

6.9 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

JSON

Stack-based buffer overflow in kl1.sys in Kaspersky Anti-Virus 6.0 and 7.0 and Internet Security 6.0 and 7.0 allows local users to gain privileges via an IOCTL 0x800520e8 call.

Affected configurations

NVD

Node

kaspersky_labkaspersky_anti-virusMatch6.0

kaspersky_labkaspersky_anti-virusMatch7.0

kaspersky_labkaspersky_internet_securityMatch6.0

kaspersky_labkaspersky_internet_securityMatch7.0

CPENameOperatorVersion
kaspersky_lab:kaspersky_anti-viruskaspersky lab kaspersky anti-viruseq6.0
kaspersky_lab:kaspersky_anti-viruskaspersky lab kaspersky anti-viruseq7.0
kaspersky_lab:kaspersky_internet_securitykaspersky lab kaspersky internet securityeq6.0
kaspersky_lab:kaspersky_internet_securitykaspersky lab kaspersky internet securityeq7.0

CPE	Name	Operator	Version
kaspersky_lab:kaspersky_anti-virus	kaspersky lab kaspersky anti-virus	eq	6.0
kaspersky_lab:kaspersky_anti-virus	kaspersky lab kaspersky anti-virus	eq	7.0
kaspersky_lab:kaspersky_internet_security	kaspersky lab kaspersky internet security	eq	6.0
kaspersky_lab:kaspersky_internet_security	kaspersky lab kaspersky internet security	eq	7.0