The klif.sys driver in Kaspersky Labs Anti-Virus 5.0.227, 5.0.228, and 5.0.335 on Windows 2000 allows local users to gain privileges by modifying certain critical code addresses that are later accessed by privileged programs.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Kaspersky_anti-virus | Kaspersky_lab | 5.0.227 (including) | 5.0.227 (including) |
| Kaspersky_anti-virus | Kaspersky_lab | 5.0.228 (including) | 5.0.228 (including) |
| Kaspersky_anti-virus | Kaspersky_lab | 5.0.335 (including) | 5.0.335 (including) |
| Kaspersky_anti-virus_personal | Kaspersky_lab | 5.0.227 (including) | 5.0.227 (including) |
| Kaspersky_anti-virus_personal | Kaspersky_lab | 5.0.228 (including) | 5.0.228 (including) |
| Kaspersky_anti-virus_personal | Kaspersky_lab | 5.0.325 (including) | 5.0.325 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=111817777430401\u0026w=2
- http://www.securityfocus.com/bid/13878
- http://marc.info/?l=bugtraq\u0026m=111817777430401\u0026w=2
- http://www.securityfocus.com/bid/13878