Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-1905. PoCs published by Ilya Rabinovich.
AI-analyzed exploit summary This exploit targets a vulnerability in Kaspersky Anti-Virus (KAV) versions 5.0.227, 5.0.228, and 5.0.335 by injecting shellcode into kernel memory to bypass protection mechanisms. It leverages the klif.sys driver to execute arbitrary code in ring0.
Description
The klif.sys driver in Kaspersky Labs Anti-Virus 5.0.227, 5.0.228, and 5.0.335 on Windows 2000 allows local users to gain privileges by modifying certain critical code addresses that are later accessed by privileged programs.
Exploits (1)
This exploit targets a vulnerability in Kaspersky Anti-Virus (KAV) versions 5.0.227, 5.0.228, and 5.0.335 by injecting shellcode into kernel memory to bypass protection mechanisms. It leverages the klif.sys driver to execute arbitrary code in ring0.