CVE-2006-3074

klif.sys in Kaspersky Internet Security 6.0 and 7.0, Kaspersky Anti-Virus (KAV) 6.0 and 7.0, KAV 6.0 for Windows Workstations, and KAV 6.0 for Windows Servers does not validate certain parameters to the (1) NtCreateKey, (2) NtCreateProcess, (3) NtCreateProcessEx, (4) NtCreateSection, (5) NtCreateSymbolicLinkObject, (6) NtCreateThread, (7) NtDeleteValueKey, (8) NtLoadKey2, (9) NtOpenKey, (10) NtOpenProcess, (11) NtOpenSection, and (12) NtQueryValueKey hooked system calls, which allows local users to cause a denial of service (reboot) via an invalid parameter, as demonstrated by the ClientId parameter to NtOpenProcess.

• CWE-119

• http://secunia.com/advisories/20629Vendor Advisory
• http://secunia.com/advisories/25603Vendor Advisory
• http://uninformed.org/index.cgi?v=4&a=4&p=4
• http://uninformed.org/index.cgi?v=4&a=4&p=7
• http://www.kaspersky.com/technews?id=203038695
• http://www.matousec.com/info/advisories/Kaspersky-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php
• http://www.rootkit.com/board.php?did=edge726&closed=0&lastx=15
• http://www.rootkit.com/newsread.php?newsid=726
• http://www.securityfocus.com/archive/1/471453/100/0/threaded
• http://www.securityfocus.com/bid/18341
• http://www.securityfocus.com/bid/24491
• http://www.securitytracker.com/id?1018257
• http://www.vupen.com/english/advisories/2006/2333Vendor Advisory
• http://www.vupen.com/english/advisories/2007/2145Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27104
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34875
• http://secunia.com/advisories/20629Vendor Advisory
• http://secunia.com/advisories/25603Vendor Advisory
• http://uninformed.org/index.cgi?v=4&a=4&p=4
• http://uninformed.org/index.cgi?v=4&a=4&p=7
• http://www.kaspersky.com/technews?id=203038695
• http://www.matousec.com/info/advisories/Kaspersky-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php
• http://www.rootkit.com/board.php?did=edge726&closed=0&lastx=15
• http://www.rootkit.com/newsread.php?newsid=726
• http://www.securityfocus.com/archive/1/471453/100/0/threaded
• http://www.securityfocus.com/bid/18341
• http://www.securityfocus.com/bid/24491
• http://www.securitytracker.com/id?1018257
• http://www.vupen.com/english/advisories/2006/2333Vendor Advisory
• http://www.vupen.com/english/advisories/2007/2145Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27104
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34875

Published

Jun 19, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-3068IBM DB2 Universal Database (UDB) before 8.2 FixPak 12 allows…
• CVE-2006-3069PHP remote file inclusion vulnerability in DoubleSpeak 0.1, …
• CVE-2006-3070write_ok.php in Zeroboard 4.1 pl8, when installed on Apache …
• CVE-2006-3071Cross-site scripting (XSS) vulnerability in index.php in MP3…
• CVE-2006-3072M4 Macro Library in Symantec Security Information Manager be…
• CVE-2006-3073Multiple cross-site scripting (XSS) vulnerabilities in the W…
• CVE-2006-3075Multiple PHP remote file inclusion vulnerabilities in Pictur…
• CVE-2006-3076PHP remote file inclusion vulnerability in software_upload/p…
• CVE-2006-3077Cross-site scripting (XSS) vulnerability in guestbook.cfm in…
• CVE-2006-3078Multiple SQL injection vulnerabilities in APBoard 2.2-r3 and…
• CVE-2006-3079Cross-site scripting (XSS) vulnerability in index.cfm in SSP…
• CVE-2006-3080Cross-site scripting (XSS) vulnerability in viewposts.cfm in…