Medium severity5.5NVD Advisory· Published Jan 6, 2017· Updated May 6, 2026

CVE-2016-4307

Description

A denial of service vulnerability exists in the IOCTL handling functionality of Kaspersky Internet Security KL1 driver. A specially crafted IOCTL signal can cause an access violation in KL1 kernel driver resulting in local system denial of service. An attacker can run a program from user-mode to trigger this vulnerability.

Affected products

Kaspersky/Internet Securityv5
Range: 16.0.0, KLIF driver version 10.0.0.1532
Kaspersky/Internet Security
cpe:2.3:a:kaspersky:internet_security:16.0.0:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.talosintelligence.com/reports/TALOS-2016-0169/nvdExploitTechnical DescriptionThird Party AdvisoryVDB Entry
securitytracker.com/id/1036702nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1036702nvd
www.securitytracker.com/id/1036703nvd

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000