What’s Vulnerable › Vulnerabilities

CVE-2007-5086

• Severity: low (CVSS 2.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2007-09-26 · updated 2026-06-16
• Weakness: CWE-20

Description

Kaspersky Anti-Virus (KAV) and Internet Security 7.0 build 125 do not properly validate certain parameters to System Service Descriptor Table (SSDT) and Shadow SSDT function handlers, which allows local users to cause a denial of service (crash) via the (1) NtUserSendInput, (2) LoadLibraryA, (3) NtOpenProcess, (4) NtOpenThread, (5) NtTerminateProcess, (6) NtUserFindWindowEx, and (7) NtUserBuildHwndList kernel SSDT hooks in kylif.sys; the (8) NtDuplicateObject (DuplicateHandle) kernel SSDT hook; and possibly other kernel SSDT hooks. NOTE: the NtCreateSection vector is covered by CVE-2007-5043.1. NOTE: the vendor disputes that the DuplicateHandle vector is a vulnerability in their code, stating that "it is not an error in our code, but an obscure method for manipulating standard Windows routines to circumvent our self-defense mechanisms."

Affected products

• Kaspersky Lab Kaspersky Anti-Virus: all versions
• Kaspersky Lab Kaspersky Internet Security: 7.0_build125

References

• http://osvdb.org/37990
• http://secunia.com/advisories/26887
• http://www.kaspersky.com/technews?id=203038706
• http://www.rootkit.com/newsread.php?newsid=778
• http://www.vupen.com/english/advisories/2007/3259
• http://osvdb.org/37990
• http://secunia.com/advisories/26887
• http://www.kaspersky.com/technews?id=203038706
• http://www.rootkit.com/newsread.php?newsid=778
• http://www.vupen.com/english/advisories/2007/3259

Get alerted when CVE-2007-5086 or the next vulnerability affects your stack