PT-2007-6147 · Kaspersky · Kaspersky Internet Security
Publicado
2007-09-24
·
Atualizado
2018-10-15
·
CVE-2007-5043
CVSS v2.0
4.4
Média
| Vetor | AV:L/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Kaspersky Internet Security version 7.0.0.125
Description
The issue is related to the improper validation of certain parameters to System Service Descriptor Table (SSDT) function handlers. This can allow local users to cause a denial of service, potentially leading to a crash, and may also allow them to gain privileges. The issue can be exploited via the NtCreateSection kernel SSDT hook or the NtLoadDriver kernel SSDT hook, which can also cause an avp.exe service outage.
Recommendations
For Kaspersky Internet Security version 7.0.0.125, consider restricting access to the NtCreateSection and NtLoadDriver kernel SSDT hooks as a temporary workaround to minimize the risk of exploitation. Additionally, avoid using the affected SSDT function handlers until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Kaspersky Internet Security