CVE-2016-4304
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2016-4304
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A denial of service vulnerability exists in the syscall filtering functionality of the Kaspersky Internet Security KLIF driver. A specially crafted native api call request can cause a access violation exception in KLIF kernel driver resulting in local denial of service. An attacker can run program from user-mode to trigger this vulnerability.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Kaspersky Internet Security KLIF驱动程序安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Kaspersky Internet Security（KIS，卡巴斯基安全软件）是俄罗斯卡巴斯基实验室（Kaspersky Lab）研发的一套兼有杀毒软件和防火墙功能的安全软件。KLIF driver事其中的一个内核驱动。 KIS KLIF驱动程序中的syscall过滤功能存在拒绝服务漏洞。攻击者可借助特制的api调用利用该漏洞造成KLIF内核驱动程序访问冲突异常，导致拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Kaspersky | Internet Security | 16.0.0, KLIF driver version 10.0.0.1532 | - |
II. Public POCs for CVE-2016-4304
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2016-4304
请登录查看更多情报信息。
- http://www.talosintelligence.com/reports/TALOS-2016-0166/x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2016-4304
Same Patch Batch · Kaspersky · 2017-01-06 · 5 CVEs total
| CVE-2016-4305 | Kaspersky Internet Security KLIF驱动程序安全漏洞 | |
| CVE-2016-4306 | Kaspersky Internet Security 信息泄露漏洞 | |
| CVE-2016-4307 | Kaspersky Internet Security KLIF驱动程序安全漏洞 | |
| CVE-2016-4329 | Kaspersky Anti-Virus 安全漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2016-4304
No comments yet