Researcher Discovers Memory Corruption Vulnerability in Kaspersky 2011/2012 Products

The vulnerability researcher Benjamin Kunz Mejri discovered a new zero-day memory corruption vulnerability in "Kaspersky Anti-Virus 2011/2012 & Internet Security 2011/2012".

The security vulnerability is locally exploKtable while loading a manipulated .CFG (Configuration/Setting) File. The vulnerability is caused by an invalid pointer corruption through the Kaspersky exception/protection filters, which could be exploited by attackers to crash the software process on all instances (Browser+Addon, Sidebar & Software). Benjamin K.M. used a new concept to identify the  memory corruption issue and has bypassed the protection filter exception (import) of the software.

Affected Version(s):
Kaspersky Anti-Virus 2012 & Kaspersky Internet Security 2012
- KIS 2012 v12.0.0.374
- KAV 2012 v12.x

Kaspersky Anti-Virus 2011 & Kaspersky Internet Security 2011
- KIS 2011 v11.0.0.232 (a.b)
- KAV 11.0.0.400
- KIS 2011 v12.0.0.374

Kaspersky Anti-Virus 2010 & Kaspersky Internet Security 2010

PoC Video:    http://www.vulnerability-lab.com/get_content.php?id=19