CVE Feed

    Dashboard / CVE / CVE-2016-4307

    CVE-2016-4307

    A denial of service vulnerability exists in the IOCTL handling functionality of Kaspersky Internet Security KL1 driver. A specially crafted IOCTL signal can cause an access violation in KL1 kernel driver resulting in local system denial of service. An attacker can run a program from user-mode to trigger this vulnerability.

    Published:Jan 6, 2017
    Last Modified:Apr 20, 2025
    EPS:Jan 6, 2017
    EPSS Score:0.00075
    CVSS Score:5.5

    Affected Products

    Vendor
    Kaspersky
    Product
    Internet Security

    Exploits

    http://www.talosintelligence.com/reports/TALOS-2016-0169/http://www.talosintelligence.com/reports/TALOS-2016-0169/

    Common Weakness Enumeration

    CWE-284 Improper Access Control

    Related CVEs

    CVE-2022-27534 (CVSS 9.8) — Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security with antivirus databases released befor…
    CVE-2021-27223 (CVSS 5.5) — A denial-of-service issue existed in one of modules that was incorporated in Kaspersky Anti-Virus products for…
    CVE-2021-26718 (CVSS 5.5) — KIS for macOS in some use cases was vulnerable to AV bypass that potentially allowed an attacker to disable an…
    CVE-2019-15687 (CVSS 6.5) — Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kasper…
    CVE-2019-15686 (CVSS 4.3) — Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kasper…
    CVE-2019-15685 (CVSS 4.3) — Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kasper…
    CVE-2019-15688 (CVSS 6.1) — Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kasper…
    CVE-2019-8286 (CVSS 4.3) — Information Disclosure in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security versions…
    CVE-2017-12816 (CVSS 9.8) — In Kaspersky Internet Security for Android 11.12.4.1622, some of application exports activities have weak perm…
    CVE-2017-12817 (CVSS 7.5) — In Kaspersky Internet Security for Android 11.12.4.1622, some of the application trace files were not encrypte…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High