PT-2016-2644 · Kaspersky · Kaspersky Internet Security+2

Published 2016-04-24 · Updated 2017-08-13 · CVE-2016-4306

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Kaspersky Total Security (affected versions not specified) Kaspersky Internet Security (affected versions not specified)

Description The issue is related to multiple information leaks in the KLDISK driver of Kaspersky security products. These leaks are caused by the lack of protection for service data and can be exploited by sending specially crafted IOCTL requests. This could allow a local attacker to access confidential information, such as kernel memory addresses or pointers, potentially useful for bypassing kernel mitigations.

Recommendations For Kaspersky Total Security, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Kaspersky Internet Security, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2016-02036

CVE-2016-4306

Affected Products

Kaspersky Anti-Virus

Kaspersky Internet Security

Kaspersky Total Security

References · 6

• 🔥 http://talosintelligence.com/reports/TALOS-2016-0168 · Exploit
• https://bdu.fstec.ru/vul/2016-02036 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-4306 · Security Note
• https://osv.dev/vulnerability/CVE-2016-4306 · Vendor Advisory
• http://securitytracker.com/id/1036702 · Note
• http://securitytracker.com/id/1036703 · Note