AhnLab V3 Internet Security Local Kernel Pool Buffer Overflow Vulnerability

Bugtraq ID:	65067
Class:	Boundary Condition Error
CVE:	CVE-2013-3947
Remote:	No
Local:	Yes
Published:	Jan 22 2014 12:00AM
Updated:	Jan 22 2014 12:00AM
Credit:	Ahmad Moghimi, Secunia.
Vulnerable:
Not Vulnerable:

AhnLab V3 Internet Security Local Kernel Pool Buffer Overflow Vulnerability

AhnLab V3 Internet Security is prone to a local kernel pool buffer-overflow vulnerability because it fails to adequate boundary check.

Local attackers can exploit this issue to execute arbitrary code with elevated privileges. Failed exploit attempts will result in denial-of-service conditions.

AhnLab V3 Internet Security 8.0.7.5 (Build 1373) is vulnerable; other versions may also be affected.

AhnLab V3 Internet Security Local Kernel Pool Buffer Overflow Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

AhnLab V3 Internet Security Local Kernel Pool Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

AhnLab V3 Internet Security Local Kernel Pool Buffer Overflow Vulnerability

References: