CVE:CVE-2006-4926
CNNVD:CNNVD-200610-349
Kaspersky Antivirus是非常流行的杀毒软件。
Kaspersky在处理某种类型的IOCTL操作时存在漏洞，本地攻击者可能利用此漏洞提升自己的权限。
Kaspersky的KLIN和KLICK设备驱动在处理IOCTL 0x80052110操作时没有正确地验证地址空间。攻击者可以向受影响的IOCTL处理器发送特制的Irp结构，通过CALL指令导致驱动执行任意代码。
solution:Upgrade kaspersky_lab kaspersky_anti-virus to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade kaspersky_lab kaspersky_anti-virus_personal to a higher version than 5.0,and avoid the version 5.0; Upgrade kaspersky_lab kaspersky_anti-virus_personal_pro to a higher version than 5.0,and avoid the version 5.0; Upgrade kaspersky_lab kaspersky_internet_security to a higher version than 6.0:maintenance_pack_2,and avoid the version 6.0:maintenance_pack_2