CVE-2006-3074 json
klif.sys in Kaspersky Internet Security 6.0 and 7.0, Kaspersky Anti-Virus (KAV) 6.0 and 7.0, KAV 6.0 for Windows Workstations, and KAV 6.0…
published 2006-06-19 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-3071
- cvss
- 5.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 7.2%
- EPSS 7.2% chance of exploitation in 30 days, percentile 94%
- public exploits
- 1
- Exploit-DB
Summary
klif.sys in Kaspersky Internet Security 6.0 and 7.0, Kaspersky Anti-Virus (KAV) 6.0 and 7.0, KAV 6.0 for Windows Workstations, and KAV 6.0 for Windows Servers does not validate certain parameters to the (1) NtCreateKey, (2) NtCreateProcess, (3) NtCreateProcessEx, (4) NtCreateSection, (5) NtCreateSymbolicLinkObject, (6) NtCreateThread, (7) NtDeleteValueKey, (8) NtLoadKey2, (9) NtOpenKey, (10) NtOpenProcess, (11) NtOpenSection, and (12) NtQueryValueKey hooked system calls, which allows local users to cause a denial of service (reboot) via an invalid parameter, as demonstrated by the ClientId parameter to NtOpenProcess.
Timeline
- Published
- First public exploit (EDB-30192)
Exploit prediction
7.18% chance of exploitation in the next 30 days, higher than 94% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-30192 Kaspersky Internet Security 6.0 - SSDT Hooks Multiple Local Vulnerabilities local, 2007-06-15
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Classification
- Weakness
-
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
References
-
vupen.com
/english/advisories/2007/2145
vdb-entry, vendor-advisory
-
vupen.com
/english/advisories/2006/2333
vdb-entry, vendor-advisory
-
secunia.com
/advisories/25603
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/20629
third-party-advisory, vendor-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/27104
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/34875
vdb-entry
-
securityfocus.com
/bid/18341
vdb-entry
-
securitytracker.com
/id?1018257
vdb-entry
- uninformed.org /index.cgi?v=4&a=4&p=4
-
securityfocus.com
/bid/24491
vdb-entry
- kaspersky.com /technews?id=203038695
- rootkit.com /board.php?did=edge726&closed=0&lastx=15
-
securityfocus.com
/archive/1/471453/100/0/threaded
mailing-list
- matousec.com /info/advisories/Kaspersky-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php
- uninformed.org /index.cgi?v=4&a=4&p=7
- rootkit.com /newsread.php?newsid=726
Sources
- CVE List CVE-2006-3074
- NVD CVE-2006-3074
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.