CVE-2007-5043 - CVE House
Back to Database
Status published Medium CVE-2007-5043

Kaspersky Internet Security 7.0.0.125 does not properly validate certain parameters...

Vulnerability Description

Kaspersky Internet Security 7.0.0.125 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to (1) cause a denial of service (crash) and possibly gain privileges via the NtCreateSection kernel SSDT hook or (2) cause a denial of service (avp.exe service outage) via the NtLoadDriver kernel SSDT hook. NOTE: this issue may partially overlap CVE-2006-3074.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-5043

Credits & Attribution

No credits recorded in the NVD database.

References

More from kaspersky lab

View All →
CVE-2009-4452
Kaspersky Anti-Virus 5.0 (5.0.712); Antivirus Personal 5.0.x; Anti-Virus 6.0 (6.0.3.837),...
Medium 6.8
CVE-2009-0449
Buffer overflow in klim5.sys in Kaspersky Anti-Virus for Workstations 6.0...
High 7.2
CVE-2008-5426
Kaspersky Internet Security Suite 2009 does not properly handle (1)...
Medium 4.3
CVE-2008-1518
Stack-based buffer overflow in kl1.sys in Kaspersky Anti-Virus 6.0 and...
High 7.2
CVE-2007-5086
Kaspersky Anti-Virus (KAV) and Internet Security 7.0 build 125 do...
Low 2.1

Affected Vendor

kaspersky lab

View all reports →

Affected Software

kaspersky internet security
Vulnerable Versions:
7.0.0.125

Timeline

Official Publish: September 24th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.