CVE-2018-9151 A NULL pointer dereference bug in the function ObReferenceObjectByHandle in the Kingsoft Internet Security 9+ kernel driver KWatch3.sys allows local non-privileged users to crash the system via IOCTL....
MediumCVSS 5.5
EPSS 0.28%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A NULL pointer dereference bug in the function ObReferenceObjectByHandle in the Kingsoft Internet Security 9+ kernel driver KWatch3.sys allows local non-privileged users to crash the system via IOCTL 0x80030030.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kingsoft internet security 9 plus | = 2010.06.23.247 | No fix listed |
References
- seclists.org mailing-list third-party-advisory