CVE-2006-4926
- State
- Published
- Severity
- Not scored
- Published
- Oct 20, 2006
- Updated
- Aug 7, 2024
- Reserved
- Sep 22, 2006
Description
The NDIS-TDI Hooking Engine, as used in the (1) KLICK (KLICK.SYS) and (2) KLIN (KLIN.SYS) device drivers 2.0.0.281 for in Kaspersky Labs Anti-Virus 6.0.0.303 and other Anti-Virus and Internet Security products, allows local users to execute arbitrary code via crafted Irp structure with invalid addresses in the 0x80052110 IOCTL.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20061020 [Reversemode Advisory] Kaspersky Anti-Virus Privilege Escalationmailing-list
- kaspersky-klinklick-privilege-escalation(29677)vdb-entry
- 29891vdb-entry
- 20061020 Re: iDefense Security Advisory 10.19.06: Kaspersky Labs Anti-Virus IOCTL Local Privilege Escalation Vulnerabilitymailing-list
- http://www.kaspersky.com/technews?id=203038678
- 20061020 Kaspersky Labs Anti-Virus IOCTL Local Privilege Escalation Vulnerabilitythird-party-advisory
- 22478third-party-advisory
- 20635vdb-entry
- 1017093vdb-entry
- ADV-2006-4117vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.