Kaspersky Internet Security IOCTL Stack Based Buffer Overflow Vulnerability

[newsbot]

Kaspersky Internet Security Suite (http://www.kaspersky.com/) is "a combination of Kaspersky anti-virus, anti-spam, and personal firewall in one product". Local exploitation of a stack-based buffer overflow in Kaspersky Lab's Internet Security could allow an attacker to execute arbitrary code in the context of the kernel.

http://www.securiteam.com/windowsntfocus/5UP021POKC.html