NVD

Id
51264  
Name
CVE-2009-4114  
Description
kl1.sys in Kaspersky Anti-Virus 2010 9.0.0.463, and possibly other versions before 9.0.0.736, does not properly validate input to IOCTL 0x0022c008, which allows local users to cause a denial of service (system crash) via IOCTL requests using crafted kernel addresses that trigger memory corruption, possibly related to klavemu.kdl.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2009-11-30  
Modified Date
2009-12-01  
Seq
2009-4114  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
259994 51264 CVE-2009-4114 http://sysdream.com/article.php?story_id=323&section_id=78  View
259995 51264 CVE-2009-4114 20091117 Kaspersky Anti-Virus 2010 <= 9.0.0.463 pointer dereference vulnerability  View
259996 51264 CVE-2009-4114 37044  View
259997 51264 CVE-2009-4114 1023198  View
259998 51264 CVE-2009-4114 ADV-2009-3286  View
259999 51264 CVE-2009-4114 kaspersky-kl1-privilege-escalation(54309)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44145 JVNDB-2009-005152 Kaspersky Anti-Virus の kl1.sys におけるサービス運用妨害 (DoS) の脆弱性 Kaspersky Anti-Virus の kl1.sys には、IOCTL 0x0022c008 への入力を適切に検証しない、および klavemu.kdl に関する処理に不備があるため、サービス運用妨害 (システムクラッシュ) 状態となる脆弱性が存在します。 CVE-2009-4114 41545 CVE-2009-4114 51264 4.9 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005152.html 2009-11-30 2012-09-25 View