Kaspersky Internet Security IOCTL Stack Based Buffer Overflow Vulnerability

[newsbot]

Kaspersky Internet Security Suite is "a combination of Kaspersky anti-virus, anti-spam, and personal firewall in one product". Local exploitation of a stack-based buffer overflow in Kaspersky Lab's Internet Security could allow an attacker to execute arbitrary code in the context of the kernel.

http://www.securiteam.com/windowsntf...UP021POKC.html