Two vulnerabilities have been discovered in Kaspersky Anti-Virus 2010, which can be exploited by malicious, local users to cause a DoS (Denial of Service) or gain escalated privileges.

1) An error in klavemu.kdl can be exploited to dereference invalid memory and cause a kernel crash via a specially crafted 0x0022C008 IOCTL.

2) The application sets insecure permissions for the "%ALLUSERSPROFILE%\Application Data\Kaspersky Lab\AVP9\" folder. This can be exploited to execute arbitrary code with SYSTEM privileges by e.g. replacing the "Bases\vlns.kdl" file.

The vulnerabilities are confirmed in version 9.0.0.463. Other versions may also be affected.

Solution
Update to version 9.0.0.736.
Further details available in Customer Area

Provided and/or discovered by
1) Heurs
2) Maxim A. Kulakov (ShineShadow)

Changelog
Further details available in Customer Area

Original Advisory
1) http://sysdream.com/article.php?story_id=323&section_id=78
2) http://www.exploit-db.com/exploits/10484

Deep Links
Links available in Customer Area