Secunia

Skywing has discovered a vulnerability in Kaspersky Anti-Virus, which potentially can be exploited by malicious, local users to cause a DoS (Denial of Service).

The vulnerability is caused due to missing validation of pointers supplied by user-space programs before they are used by custom system services installed by "klif.sys" to access memory. This can be exploited to cause the system to reboot due to invalid memory access.

The vulnerability has been confirmed in Kaspersky Anti-Virus 6.0.0.300 and Kaspersky Internet Security 6.0.0.300. Other versions may also be affected.

Solution
A fix was issued on 2006-06-30 via regular database update.

Provided and/or discovered by
Skywing

Changelog
Further details available in Customer Area

Original Advisory
Kaspersky:
http://www.kaspersky.com/technews?id=189221798

Skywing:
http://uninformed.org/index.cgi?v=4&a=4&p=4

Deep Links
Links available in Customer Area