Kaspersky Internet Security KLIF Driver NtAdjustTokenPrivileges_HANDLER Denial of Service(CVE-2016-4305)

Summary A denial of service vulnerability exists in the syscall filtering functionality of Kaspersky Internet Security KLIF driver. A specially crafted native api call can cause a access violation in KLIF kernel driver resulting in local denial of service. An attacker can run program from user mo...

CVE-2016-4305

CVE-2016-4305 affects the Kaspersky Internet Security KLIF driver. The vulnerability lies in the driver’s syscall filtering path where the attacker-controlled TOKENPRIVILEGES.PrivilegeCount can overflow when processed (intended for NtAdjustTokenPrivileges), allowing a crafted user-mode call to tr...

KLA10945 Information leak and denial of service vulnerabilities in Kaspersky products

Multiple serious vulnerabilities have been found in Kaspersky products. Malicious users can exploit these vulnerabilities to cause denial of service or obtain sensitive information. Below is a complete list of vulnerabilities: 1. Multiple information leaks in different IOCTL handlers of Kaspersky...