CVE-2018-9151

Name of the Vulnerable Software and Affected Versions Kingsoft Internet Security versions 9 and later

Description A NULL pointer dereference bug in the ObReferenceObjectByHandle function within the KWatch3.sys kernel driver allows local non-privileged users to crash the system. This can be achieved via the IOCTL 0x80030030 endpoint.

Recommendations For Kingsoft Internet Security versions 9 and later, consider disabling the ObReferenceObjectByHandle function as a temporary workaround until a patch is available. Restrict access to the IOCTL 0x80030030 endpoint to minimize the risk of system crashes. At the moment, there is no information about a newer version that contains a fix for this issue.