CVE-2009-0449

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-02-10 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in klim5.sys in Kaspersky Anti-Virus for Workstations 6.0 and Anti-Virus 2008 allows local users to gain privileges via an IOCTL 0x80052110 call.

Affected products

Kaspersky Lab Kaspersky Anti-Virus: 6.0, 2008

References

http://kartoffel.reversemode.com/downloads/kaspersky_klim5_plugin.zip
http://secunia.com/advisories/33788
http://www.reversemode.com/index.php?option=com_content&task=view&id=60&Itemid=1
http://www.securityfocus.com/archive/1/500606/100/0/threaded
http://www.securityfocus.com/bid/33561
http://www.securitytracker.com/id?1021661
http://www.wintercore.com/advisories/advisory_W020209.html
http://kartoffel.reversemode.com/downloads/kaspersky_klim5_plugin.zip
http://secunia.com/advisories/33788
http://www.reversemode.com/index.php?option=com_content&task=view&id=60&Itemid=1
http://www.securityfocus.com/archive/1/500606/100/0/threaded
http://www.securityfocus.com/bid/33561

Get alerted when CVE-2009-0449 or the next vulnerability affects your stack