CVE-2006-3074

Kaspersky Internet Security/KAV <7.0 - Local Privilege Escalation

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-3074. PoCs published by Matousec Transparent security.

AI-analyzed exploit summary This is a vulnerability writeup describing multiple local vulnerabilities in Kaspersky Internet Security 6, including potential DoS and unconfirmed privilege escalation via kernel-level arbitrary code execution. The advisory references a related issue (BID 23326) but lacks exploit code.

Description

klif.sys in Kaspersky Internet Security 6.0 and 7.0, Kaspersky Anti-Virus (KAV) 6.0 and 7.0, KAV 6.0 for Windows Workstations, and KAV 6.0 for Windows Servers does not validate certain parameters to the (1) NtCreateKey, (2) NtCreateProcess, (3) NtCreateProcessEx, (4) NtCreateSection, (5) NtCreateSymbolicLinkObject, (6) NtCreateThread, (7) NtDeleteValueKey, (8) NtLoadKey2, (9) NtOpenKey, (10) NtOpenProcess, (11) NtOpenSection, and (12) NtQueryValueKey hooked system calls, which allows local users to cause a denial of service (reboot) via an invalid parameter, as demonstrated by the ClientId parameter to NtOpenProcess.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Matousec Transparent security · textlocalwindows
https://www.exploit-db.com/exploits/30192

This is a vulnerability writeup describing multiple local vulnerabilities in Kaspersky Internet Security 6, including potential DoS and unconfirmed privilege escalation via kernel-level arbitrary code execution. The advisory references a related issue (BID 23326) but lacks exploit code.

Classification
Writeup 90%
Attack Type
Dos | Other
Complexity
Theoretical
Reliability
Theoretical
Target: Kaspersky Internet Security 6.0.2.614 and 6.0.2.621
No auth needed
Prerequisites: Local access to the target system
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (16)

Core 16
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/27104
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/34875
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/18341
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1018257
Various Sources x_refsource_misc
http://uninformed.org/index.cgi?v=4&a=4&p=4
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/2145
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/24491
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/2333
Various Sources x_refsource_confirm
http://www.kaspersky.com/technews?id=203038695
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/25603
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/471453/100/0/threaded
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/20629
Various Sources x_refsource_misc
http://uninformed.org/index.cgi?v=4&a=4&p=7
Various Sources x_refsource_misc
http://www.rootkit.com/newsread.php?newsid=726

Scores

EPSS 0.0705
EPSS Percentile 93.4%

Details

CWE
CWE-119
Status published
Products (4)
kaspersky/kaspersky_anti-virus 6.0
kaspersky/kaspersky_anti-virus 7.0
kaspersky/kaspersky_internet_security 6.0
kaspersky/kaspersky_internet_security 7.0
Published Jun 19, 2006
Tracked Since Feb 18, 2026