CVE-2008-1518

CVE-2008-1518 describes a local privilege escalation in Kaspersky Lab products. The vulnerable component is the kernel driver kl1.sys used by Kaspersky Anti-Virus 6.0/7.0 and Internet Security 6.0/7.0. The issue is a stack-based buffer overflow triggered in the handling of IOCTL 0x800520e8 due to...

iDefense Security Advisory 06.04.08: Kaspersky Internet Security IOCTL Stack Based Buffer Overflow Vulnerability

iDefense Security Advisory 06.04.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 04, 2008 I. BACKGROUND aspersky Internet Security Suite is a combination of Kaspersky anti-virus, anti-spam, and personal firewall in one product. For more information see the vendor's website at the...