Multiple information leaks exist in various IOCTL handlers of the Kaspersky Internet Security KLDISK driver. Specially crafted IOCTL requests can cause the driver to return out-of-bounds kernel memory, potentially leaking sensitive information such as privileged tokens or kernel memory addresses that may be useful in bypassing kernel mitigations. An unprivileged user can run a program from user-mode to trigger this vulnerability.
References
Link | Resource |
---|---|
http://securitytracker.com/id/1036702 | Third Party Advisory VDB Entry |
http://www.securitytracker.com/id/1036702 | |
http://www.securitytracker.com/id/1036703 | |
http://www.talosintelligence.com/reports/TALOS-2016-0168/ | Exploit Technical Description Third Party Advisory VDB Entry |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: certcc
Published: 2017-01-06T21:00:00
Updated: 2017-08-12T09:57:01
Reserved: 2016-04-27T00:00:00
Link: CVE-2016-4306
JSON object: View
NVD Information
Status : Modified
Published: 2017-01-06T21:59:01.447
Modified: 2017-08-13T01:29:11.397
Link: CVE-2016-4306
JSON object: View
Redhat Information
No data.
CWE