Lucene search

K
cve[email protected]CVE-2010-3396
HistorySep 15, 2010 - 6:00 p.m.

CVE-2010-3396

2010-09-1518:00:44
CWE-119
web.nvd.nist.gov
19
cve-2010-3396
buffer overflow
kavfm.sys
kingsoft antivirus
arbitrary code execution
nvd
security vulnerability

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

Buffer overflow in kavfm.sys in Kingsoft Antivirus 2010.04.26.648 and earlier allows local users to execute arbitrary code via a long argument to IOCTL 0x80030004. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD
Node
kingsoftkingsoft_antivirusRange2010.04.26.648

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

Related for CVE-2010-3396