CVE

Id
91125  
CVE No.
CVE-2016-4306  
Status
Candidate  
Description
Multiple information leaks exist in various IOCTL handlers of the Kaspersky Internet Security KLDISK driver. Specially crafted IOCTL requests can cause the driver to return out-of-bounds kernel memory, potentially leaking sensitive information such as privileged tokens or kernel memory addresses that may be useful in bypassing kernel mitigations. An unprivileged user can run a program from user-mode to trigger this vulnerability.  
Phase
Assigned (20160427)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
3269 JVNDB-2016-004042 複数の Apple 製品の libxml2 におけるサービス運用妨害 (DoS) の脆弱性 複数の Apple 製品の libxml2 には、サービス運用妨害 (メモリ破損) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2016-4619 91125 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004042.html  View