VULNERABILITY INTELLIGENCE
CVE-2016-4304
CVSS score5.5 MEDIUM
EPSS probability0.49%
CISA KEVNot currently listed
Published2017-01-06
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
A denial of service vulnerability exists in the syscall filtering functionality of the Kaspersky Internet Security KLIF driver. A specially crafted native api call request can cause a access violation exception in KLIF kernel driver resulting in local denial of service. An attacker can run program from user-mode to trigger this vulnerability.
Weakness classification
- CWE-284: Improper Access Control
Primary references
- cret@cert.org
- cret@cert.org
- cret@cert.org — Exploit, Technical Description, Third Party Advisory, VDB Entry
- nvd@nist.gov — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Technical Description, Third Party Advisory, VDB Entry