CVE-2006-3074

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 7.2%

from disclosure to weapon361 days

Published on NVDJun 19

1st PoC+361d

exploitation probability

7.2%top 6% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

klif.sys in Kaspersky Internet Security 6.0 and 7.0, Kaspersky Anti-Virus (KAV) 6.0 and 7.0, KAV 6.0 for Windows Workstations, and KAV 6.0 for Windows Servers does not validate certain parameters to the (1) NtCreateKey, (2) NtCreateProcess, (3) NtCreateProcessEx, (4) NtCreateSection, (5) NtCreateSymbolicLinkObject, (6) NtCreateThread, (7) NtDeleteValueKey, (8) NtLoadKey2, (9) NtOpenKey, (10) NtOpenProcess, (11) NtOpenSection, and (12) NtQueryValueKey hooked system calls, which allows local users to cause a denial of service (reboot) via an invalid parameter, as demonstrated by the ClientId parameter to NtOpenProcess.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/30192

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://secunia.com/advisories/20629 http://secunia.com/advisories/25603 https://exchange.xforce.ibmcloud.com/vulnerabilities/27104 https://exchange.xforce.ibmcloud.com/vulnerabilities/34875 http://uninformed.org/index.cgi?v=4&a=4&p=4 http://uninformed.org/index.cgi?v=4&a=4&p=7 http://www.kaspersky.com/technews?id=203038695 http://www.matousec.com/info/advisories/Kaspersky-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php http://www.rootkit.com/board.php?did=edge726&closed=0&lastx=15 http://www.rootkit.com/newsread.php?newsid=726 http://www.securityfocus.com/archive/1/471453/100/0/threaded http://www.securityfocus.com/bid/18341