Null pointer dereference

2018-03-3019:29:00

PRIOn knowledge base

www.prio-n.com

5.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

A NULL pointer dereference bug in the function ObReferenceObjectByHandle in the Kingsoft Internet Security 9+ kernel driver KWatch3.sys allows local non-privileged users to crash the system via IOCTL 0x80030030.

CPENameOperatorVersion
internet_security_9_pluseq2010.06.23.247

CPE	Name	Operator	Version
	internet_security_9_plus	eq	2010.06.23.247

References

seclists.org/fulldisclosure/2018/Mar/78