NVD

Id
54050  
Name
CVE-2007-1880  
Description
Integer overflow in the _NtSetValueKey function in klif.sys in Kaspersky Anti-Virus, Anti-Virus for Workstations, Anti-Virus for File Server 6.0, and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows context-dependent attackers to execute arbitrary code via a large, unsigned "data size argument," which results in a heap overflow.  
Reject
 
CVSS Version
2  
CVSS Score
6.6  
Severity
Medium  
CVSS Base Score
6.6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
2.7  
CVSS Vector
(AV:L/AC:M/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-04-05  
Modified Date
2011-03-07  
Seq
2007-1880  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
274143 54050 CVE-2007-1880 20070404 Kaspersky Internet Security Suite klif.sys Heap Overflow Vulnerability  View
274144 54050 CVE-2007-1880 http://www.kaspersky.com/technews?id=203038693  View
274145 54050 CVE-2007-1880 http://www.kaspersky.com/technews?id=203038694  View
274146 54050 CVE-2007-1880 23326  View
274147 54050 CVE-2007-1880 1017872  View
274148 54050 CVE-2007-1880 1017873  View
274149 54050 CVE-2007-1880 ADV-2007-1268  View
274150 54050 CVE-2007-1880 kaspersky-klif-bo(33460)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54951 JVNDB-2007-003643 Kaspersky Anti-Virus などの Klif.sys における整数オーバーフローの脆弱性 Kaspersky Anti-Virus および Kaspersky Internet Security の Klif.sys の _NtSetValueKey 関数には、整数オーバーフローの脆弱性が存在します。 CVE-2007-1880 25235 CVE-2007-1880 54050 6.6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003643.html 2007-04-05 2012-09-25 View