{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-06-14T00:00:00", "descriptions": [{"lang": "en", "value": "klif.sys in Kaspersky Internet Security 6.0 and 7.0, Kaspersky Anti-Virus (KAV) 6.0 and 7.0, KAV 6.0 for Windows Workstations, and KAV 6.0 for Windows Servers does not validate certain parameters to the (1) NtCreateKey, (2) NtCreateProcess, (3) NtCreateProcessEx, (4) NtCreateSection, (5) NtCreateSymbolicLinkObject, (6) NtCreateThread, (7) NtDeleteValueKey, (8) NtLoadKey2, (9) NtOpenKey, (10) NtOpenProcess, (11) NtOpenSection, and (12) NtQueryValueKey hooked system calls, which allows local users to cause a denial of service (reboot) via an invalid parameter, as demonstrated by the ClientId parameter to NtOpenProcess."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-18T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "kaspersky-klif-dos(27104)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27104"}, {"name": "kaspersky-multiple-klif-dos(34875)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34875"}, {"name": "18341", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/18341"}, {"name": "1018257", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1018257"}, {"tags": ["x_refsource_MISC"], "url": "http://uninformed.org/index.cgi?v=4&a=4&p=4"}, {"name": "ADV-2007-2145", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/2145"}, {"name": "24491", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/24491"}, {"name": "ADV-2006-2333", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/2333"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.kaspersky.com/technews?id=203038695"}, {"name": "25603", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/25603"}, {"tags": ["x_refsource_MISC"], "url": "http://www.rootkit.com/board.php?did=edge726&closed=0&lastx=15"}, {"name": "20070615 Kaspersky Multiple insufficient argument validation of hooked SSDT function Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/471453/100/0/threaded"}, {"tags": ["x_refsource_MISC"], "url": "http://www.matousec.com/info/advisories/Kaspersky-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php"}, {"name": "20629", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/20629"}, {"tags": ["x_refsource_MISC"], "url": "http://uninformed.org/index.cgi?v=4&a=4&p=7"}, {"tags": ["x_refsource_MISC"], "url": "http://www.rootkit.com/newsread.php?newsid=726"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-3074", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "klif.sys in Kaspersky Internet Security 6.0 and 7.0, Kaspersky Anti-Virus (KAV) 6.0 and 7.0, KAV 6.0 for Windows Workstations, and KAV 6.0 for Windows Servers does not validate certain parameters to the (1) NtCreateKey, (2) NtCreateProcess, (3) NtCreateProcessEx, (4) NtCreateSection, (5) NtCreateSymbolicLinkObject, (6) NtCreateThread, (7) NtDeleteValueKey, (8) NtLoadKey2, (9) NtOpenKey, (10) NtOpenProcess, (11) NtOpenSection, and (12) NtQueryValueKey hooked system calls, which allows local users to cause a denial of service (reboot) via an invalid parameter, as demonstrated by the ClientId parameter to NtOpenProcess."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "kaspersky-klif-dos(27104)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27104"}, {"name": "kaspersky-multiple-klif-dos(34875)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34875"}, {"name": "18341", "refsource": "BID", "url": "http://www.securityfocus.com/bid/18341"}, {"name": "1018257", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1018257"}, {"name": "http://uninformed.org/index.cgi?v=4&a=4&p=4", "refsource": "MISC", "url": "http://uninformed.org/index.cgi?v=4&a=4&p=4"}, {"name": "ADV-2007-2145", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/2145"}, {"name": "24491", "refsource": "BID", "url": "http://www.securityfocus.com/bid/24491"}, {"name": "ADV-2006-2333", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/2333"}, {"name": "http://www.kaspersky.com/technews?id=203038695", "refsource": "CONFIRM", "url": "http://www.kaspersky.com/technews?id=203038695"}, {"name": "25603", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/25603"}, {"name": "http://www.rootkit.com/board.php?did=edge726&closed=0&lastx=15", "refsource": "MISC", "url": "http://www.rootkit.com/board.php?did=edge726&closed=0&lastx=15"}, {"name": "20070615 Kaspersky Multiple insufficient argument validation of hooked SSDT function Vulnerability", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/471453/100/0/threaded"}, {"name": "http://www.matousec.com/info/advisories/Kaspersky-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php", "refsource": "MISC", "url": "http://www.matousec.com/info/advisories/Kaspersky-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php"}, {"name": "20629", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/20629"}, {"name": "http://uninformed.org/index.cgi?v=4&a=4&p=7", "refsource": "MISC", "url": "http://uninformed.org/index.cgi?v=4&a=4&p=7"}, {"name": "http://www.rootkit.com/newsread.php?newsid=726", "refsource": "MISC", "url": "http://www.rootkit.com/newsread.php?newsid=726"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T18:16:05.353Z"}, "title": "CVE Program Container", "references": [{"name": "kaspersky-klif-dos(27104)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27104"}, {"name": "kaspersky-multiple-klif-dos(34875)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34875"}, {"name": "18341", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/18341"}, {"name": "1018257", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1018257"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://uninformed.org/index.cgi?v=4&a=4&p=4"}, {"name": "ADV-2007-2145", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/2145"}, {"name": "24491", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/24491"}, {"name": "ADV-2006-2333", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/2333"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.kaspersky.com/technews?id=203038695"}, {"name": "25603", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/25603"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.rootkit.com/board.php?did=edge726&closed=0&lastx=15"}, {"name": "20070615 Kaspersky Multiple insufficient argument validation of hooked SSDT function Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/471453/100/0/threaded"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.matousec.com/info/advisories/Kaspersky-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php"}, {"name": "20629", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/20629"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://uninformed.org/index.cgi?v=4&a=4&p=7"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.rootkit.com/newsread.php?newsid=726"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-3074", "datePublished": "2006-06-19T10:00:00", "dateReserved": "2006-06-19T00:00:00", "dateUpdated": "2024-08-07T18:16:05.353Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:kaspersky:kaspersky_anti-virus:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "F8015458-2645-482D-A0D3-B08B73655E06", "vulnerable": true}, {"criteria": "cpe:2.3:a:kaspersky:kaspersky_anti-virus:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "A85D0F7D-B2F5-49D2-9CA8-1B02A4A72872", "vulnerable": true}, {"criteria": "cpe:2.3:a:kaspersky:kaspersky_internet_security:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "016D3A82-25B8-433E-B159-DC8EBBF68733", "vulnerable": true}, {"criteria": "cpe:2.3:a:kaspersky:kaspersky_internet_security:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "CF832371-8A92-4FF6-BB6E-AECB2E5CE7E2", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:kaspersky:kaspersky_anti-virus:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "F8015458-2645-482D-A0D3-B08B73655E06", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*", "matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256", "vulnerable": false}, {"criteria": "cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "BDA0CCC0-F2BE-4AF8-844E-CEA1B276792D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "klif.sys in Kaspersky Internet Security 6.0 and 7.0, Kaspersky Anti-Virus (KAV) 6.0 and 7.0, KAV 6.0 for Windows Workstations, and KAV 6.0 for Windows Servers does not validate certain parameters to the (1) NtCreateKey, (2) NtCreateProcess, (3) NtCreateProcessEx, (4) NtCreateSection, (5) NtCreateSymbolicLinkObject, (6) NtCreateThread, (7) NtDeleteValueKey, (8) NtLoadKey2, (9) NtOpenKey, (10) NtOpenProcess, (11) NtOpenSection, and (12) NtQueryValueKey hooked system calls, which allows local users to cause a denial of service (reboot) via an invalid parameter, as demonstrated by the ClientId parameter to NtOpenProcess."}, {"lang": "es", "value": "klif.sys en Kaspersky Internet Security v6.0 y v7.0, Kaspersky Anti-Virus (KAV) v6.0 y v7.0, KAV v6.0 para Windows Workstations, y KAV v6.0 para Windows Servers no validan de forma adecuada ciertos par\u00e1metros de llamadas al sistema \"enganchadas\" sobre (1) NtCreateKey, (2) NtCreateProcess, (3) NtCreateProcessEx, (4) NtCreateSection, (5) NtCreateSymbolicLinkObject, (6) NtCreateThread, (7) NtDeleteValueKey, (8) NtLoadKey2, (9) NtOpenKey, (10) NtOpenProcess, (11) NtOpenSection, y (12) NtQueryValueKey, lo que permite a usuarios locales provocar una denegaci\u00f3n de servicio (reinicio) a trav\u00e9s de un par\u00e1metro inv\u00e1lido, como se demostr\u00f3 con el par\u00e1metro ClientId sobre NtOpenProcess."}], "id": "CVE-2006-3074", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-06-19T10:02:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/20629"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/25603"}, {"source": "cve@mitre.org", "url": "http://uninformed.org/index.cgi?v=4&a=4&p=4"}, {"source": "cve@mitre.org", "url": "http://uninformed.org/index.cgi?v=4&a=4&p=7"}, {"source": "cve@mitre.org", "url": "http://www.kaspersky.com/technews?id=203038695"}, {"source": "cve@mitre.org", "url": "http://www.matousec.com/info/advisories/Kaspersky-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php"}, {"source": "cve@mitre.org", "url": "http://www.rootkit.com/board.php?did=edge726&closed=0&lastx=15"}, {"source": "cve@mitre.org", "url": "http://www.rootkit.com/newsread.php?newsid=726"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/471453/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/18341"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/24491"}, {"source": "cve@mitre.org", "url": "http://www.securitytracker.com/id?1018257"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2006/2333"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2007/2145"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27104"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34875"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/20629"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/25603"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://uninformed.org/index.cgi?v=4&a=4&p=4"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://uninformed.org/index.cgi?v=4&a=4&p=7"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.kaspersky.com/technews?id=203038695"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.matousec.com/info/advisories/Kaspersky-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.rootkit.com/board.php?did=edge726&closed=0&lastx=15"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.rootkit.com/newsread.php?newsid=726"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/471453/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/18341"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/24491"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id?1018257"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2006/2333"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2007/2145"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27104"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34875"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}