Kaspersky Labs Anti-Virus NDIS-TDI Hooking Engine Local Privilege Escalation Vulnerability
BID:20635
Info
Kaspersky Labs Anti-Virus NDIS-TDI Hooking Engine Local Privilege Escalation Vulnerability
| Bugtraq ID: | 20635 |
| Class: | Design Error |
| CVE: |
CVE-2006-4926 |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 19 2006 12:00AM |
| Updated: | Oct 31 2006 03:32PM |
| Credit: | Rubén Santamarta is credited with the discovery of this vulnerability. |
| Vulnerable: |
Kaspersky Labs Anti-Virus Personal Pro 5.0 Kaspersky Labs Anti-Virus Personal 5.0 Kaspersky Internet Security 6.0 Kaspersky Anti-Virus for Windows Workstation 5.0 |
| Not Vulnerable: | |
Discussion
Kaspersky Labs Anti-Virus NDIS-TDI Hooking Engine Local Privilege Escalation Vulnerability
Kaspersky Labs Anti-Virus is prone to a local privilege-escalation vulnerability.
A local attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. This may facilitate a complete compromise of the affected computer.
Kaspersky Labs Anti-Virus is prone to a local privilege-escalation vulnerability.
A local attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. This may facilitate a complete compromise of the affected computer.
Exploit / POC
Kaspersky Labs Anti-Virus NDIS-TDI Hooking Engine Local Privilege Escalation Vulnerability
The following exploits are available.
The following exploits are available.
Solution / Fix
Kaspersky Labs Anti-Virus NDIS-TDI Hooking Engine Local Privilege Escalation Vulnerability
Solution:
The vendor has released an update to address this issue. The update is automatically obtained through the regular signature-update functionality.
Solution:
The vendor has released an update to address this issue. The update is automatically obtained through the regular signature-update functionality.
References
Kaspersky Labs Anti-Virus NDIS-TDI Hooking Engine Local Privilege Escalation Vulnerability
References:
References: