CVE-2010-3396

Name of the Vulnerable Software and Affected Versions Kingsoft Antivirus versions 2010.04.26.648 and earlier

Description The issue is related to a buffer overflow in the kavfm.sys component. This can be exploited by local users to execute arbitrary code by providing a long argument to the IOCTL 0x80030004.

Recommendations For Kingsoft Antivirus versions 2010.04.26.648 and earlier, consider updating to a newer version that addresses this issue. As a temporary workaround, restrict access to the IOCTL 0x80030004 to minimize the risk of exploitation.