Kingsoft Antivirus "KisKrnl. sys" Driver Local Privilege Escalation Vulnerability

Release date:
Updated on:

Affected Systems:
Kingsoft Corp Kingsoft Antivirus 2011.7.8.913
Description:
--------------------------------------------------------------------------------
Bugtraq id: 48867

Kingsoft drug overlord is a widely used anti-virus program in China.

Kingsoft's KisKrnl. sys driver has a vulnerability in implementation. Local attackers can exploit this vulnerability to execute arbitrary code with higher permissions and completely control affected computers or cause DOS.

<* Source: MJ0011 (dlrow1991@ymail.com)
*>

Test method:
--------------------------------------------------------------------------------

Alert

The following procedures (methods) may be offensive and are intended only for security research and teaching. Users are at your own risk!

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Kingsoft Corp
-------------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://www.kingsoft.com/

1 2 Next Page