Kaspersky Internet Security KLIF Driver NtUserCreateWindowEx_HANDLER Denial of Service(CVE-2016-4304)

Summary A denial of service vulnerability exists in the syscall filtering functionality of the Kaspersky Internet Security KLIF driver. A specially crafted native api call request can cause a access violation exception in KLIF kernel driver resulting in local denial of service. An attacker can ru...

CVE-2016-4304

CVE-2016-4304 affects the Kaspersky Internet Security KLIF driver. A crafted NtUserCreateWindowEx call can cause an access violation in KLIF, leading to local denial of service. Exploitation can be triggered from user mode and is tied to memory access checks in the driver (TestPtrAndCopy flow). P...

KLA10945 Information leak and denial of service vulnerabilities in Kaspersky products

Multiple serious vulnerabilities have been found in Kaspersky products. Malicious users can exploit these vulnerabilities to cause denial of service or obtain sensitive information. Below is a complete list of vulnerabilities: 1. Multiple information leaks in different IOCTL handlers of Kaspersky...