CVE

Id
19178  
CVE No.
CVE-2006-3074  
Status
Candidate  
Description
klif.sys in Kaspersky Internet Security 6.0 and 7.0, Kaspersky Anti-Virus (KAV) 6.0 and 7.0, KAV 6.0 for Windows Workstations, and KAV 6.0 for Windows Servers does not validate certain parameters to the (1) NtCreateKey, (2) NtCreateProcess, (3) NtCreateProcessEx, (4) NtCreateSection, (5) NtCreateSymbolicLinkObject, (6) NtCreateThread, (7) NtDeleteValueKey, (8) NtLoadKey2, (9) NtOpenKey, (10) NtOpenProcess, (11) NtOpenSection, and (12) NtQueryValueKey hooked system calls, which allows local users to cause a denial of service (reboot) via an invalid parameter, as demonstrated by the ClientId parameter to NtOpenProcess.  
Phase
Assigned (20060619)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
170969 19178 CVE-2006-3074 BUGTRAQ:20070615 Kaspersky Multiple insufficient argument validation of hooked SSDT function Vulnerability  View
170970 19178 CVE-2006-3074 URL:http://www.securityfocus.com/archive/1/archive/1/471453/100/0/threaded  View
170971 19178 CVE-2006-3074 MISC:http://uninformed.org/index.cgi?v=4&a=4&p=4  View
170972 19178 CVE-2006-3074 MISC:http://uninformed.org/index.cgi?v=4&a=4&p=7  View
170973 19178 CVE-2006-3074 MISC:http://www.rootkit.com/board.php?did=edge726&closed=0&lastx=15  View
170974 19178 CVE-2006-3074 MISC:http://www.rootkit.com/newsread.php?newsid=726  View
170975 19178 CVE-2006-3074 MISC:http://www.matousec.com/info/advisories/Kaspersky-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php  View
170976 19178 CVE-2006-3074 CONFIRM:http://www.kaspersky.com/technews?id=203038695  View
170977 19178 CVE-2006-3074 BID:18341  View
170978 19178 CVE-2006-3074 URL:http://www.securityfocus.com/bid/18341  View
170979 19178 CVE-2006-3074 BID:24491  View
170980 19178 CVE-2006-3074 URL:http://www.securityfocus.com/bid/24491  View
170981 19178 CVE-2006-3074 VUPEN:ADV-2006-2333  View
170982 19178 CVE-2006-3074 URL:http://www.vupen.com/english/advisories/2006/2333  View
170983 19178 CVE-2006-3074 VUPEN:ADV-2007-2145  View
170984 19178 CVE-2006-3074 URL:http://www.vupen.com/english/advisories/2007/2145  View
170985 19178 CVE-2006-3074 SECTRACK:1018257  View
170986 19178 CVE-2006-3074 URL:http://www.securitytracker.com/id?1018257  View
170987 19178 CVE-2006-3074 SECUNIA:20629  View
170988 19178 CVE-2006-3074 URL:http://secunia.com/advisories/20629  View
170989 19178 CVE-2006-3074 SECUNIA:25603  View
170990 19178 CVE-2006-3074 URL:http://secunia.com/advisories/25603  View
170991 19178 CVE-2006-3074 XF:kaspersky-klif-dos(27104)  View
170992 19178 CVE-2006-3074 URL:http://xforce.iss.net/xforce/xfdb/27104  View
170993 19178 CVE-2006-3074 XF:kaspersky-multiple-klif-dos(34875)  View

Related JVN