CVE-2008-1625 aavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to IOCTL 0xb2d60030, which allows local users to gain privileges via certain IOCTL requests.
MediumCVSS 6.8
EPSS 0.71%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
aavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to IOCTL 0xb2d60030, which allows local users to gain privileges via certain IOCTL requests.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| avast antivirus home | = 4.7.827 | No fix listed |
| avast antivirus home | = 4.7.844 | No fix listed |
| avast antivirus home | = 4.7.869 | No fix listed |
| avast antivirus home | = 4.7.1043 | No fix listed |
| avast antivirus home | = 4.7.1098 | No fix listed |
| avast antivirus professional | = 4.7.827 | No fix listed |
| avast antivirus professional | = 4.7.844 | No fix listed |
| avast antivirus professional | = 4.7.1043 | No fix listed |
| avast antivirus professional | = 4.7.1098 | No fix listed |
References
- 29605 third-party-advisory vendor-advisory
- www.avast.com
- 20080330 [TKADV2008-002] avast! 4.7 aavmker4.sys Kernel Memory Corruption mailing-list
- 28502 vdb-entry
- 1019732 vdb-entry
- www.trapkit.de
- ADV-2008-1034 vdb-entry
- avast-aavmker4-privilege-escalation(41527) vdb-entry