CVE-2009-4114

no score yetEPSS 0.8%

kaspersky kaspersky anti-virus: no CVSS score yet. EPSS 0.8% chance of exploitation in the next 30 days.

kl1.sys in Kaspersky Anti-Virus 2010 9.0.0.463, and possibly other versions before 9.0.0.736, does not properly validate input to IOCTL 0x0022c008, which allows local users to cause a denial of service (system crash) via IOCTL requests using crafted kernel addresses that trigger memory corruption, possibly related to klavemu.kdl.

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2009-11-30
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

kaspersky:kaspersky_anti-virus

References

http://osvdb.org/60207
http://secunia.com/advisories/37398
http://sysdream.com/article.php?story_id=323&section_id=78
http://www.securityfocus.com/archive/1/507933/100/0/threaded
http://www.securityfocus.com/bid/37044

Check your stack JSON