PT-2016-2644 · Kaspersky · Kaspersky Internet Security+2
Publicado
2016-04-24
·
Atualizado
2017-08-13
·
CVE-2016-4306
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Kaspersky Total Security (affected versions not specified)
Kaspersky Internet Security (affected versions not specified)
Description
The issue is related to multiple information leaks in the KLDISK driver of Kaspersky security products. These leaks are caused by the lack of protection for service data and can be exploited by sending specially crafted IOCTL requests. This could allow a local attacker to access confidential information, such as kernel memory addresses or pointers, potentially useful for bypassing kernel mitigations.
Recommendations
For Kaspersky Total Security, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For Kaspersky Internet Security, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Kaspersky Anti-Virus
Kaspersky Internet Security
Kaspersky Total Security