CVE-2010-0705 Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly validate input to IOCTL 0xb2d60030, which allows local users to cause a denial o...
HighCVSS 7.2
EPSS 0.93%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly validate input to IOCTL 0xb2d60030, which allows local users to cause a denial of service (system crash) or execute arbitrary code to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| avast antivirus home | <= 5.0.396.0 | No fix listed |
| avast antivirus home | = 4.8.1169 | No fix listed |
| avast antivirus home | = 4.8.1195 | No fix listed |
| avast antivirus home | = 4.8.1201 | No fix listed |
| avast antivirus home | = 4.8.1227 | No fix listed |
| avast antivirus home | = 4.8.1229 | No fix listed |
| avast antivirus home | = 4.8.1282 | No fix listed |
| avast antivirus home | = 4.8.1290 | No fix listed |
| avast antivirus home | = 4.8.1296 | No fix listed |
| avast antivirus home | = 4.8.1335 | No fix listed |
| avast antivirus home | = 4.8.1351 | No fix listed |
| avast antivirus home | = 4.8.1368.0 | No fix listed |
| avast antivirus professional | <= 5.0.396.0 | No fix listed |
| avast antivirus professional | = 4.8.1169 | No fix listed |
| avast antivirus professional | = 4.8.1195 | No fix listed |
| avast antivirus professional | = 4.8.1201 | No fix listed |
| avast antivirus professional | = 4.8.1227 | No fix listed |
| avast antivirus professional | = 4.8.1229 | No fix listed |
| avast antivirus professional | = 4.8.1282 | No fix listed |
| avast antivirus professional | = 4.8.1290 | No fix listed |
| avast antivirus professional | = 4.8.1296 | No fix listed |
| avast antivirus professional | = 4.8.1335 | No fix listed |
| avast antivirus professional | = 4.8.1351 | No fix listed |
| avast antivirus professional | = 4.8.1356.0 | No fix listed |
| avast antivirus professional | = 4.8.1368.0 | No fix listed |
References
- forum.avast.com vendor-advisory
- 62510 vdb-entry
- 38677 third-party-advisory vendor-advisory
- 38689 third-party-advisory vendor-advisory
- 20100223 [TKADV2010-003] avast! 4.8 and 5.0 aavmker4.sys Kernel Memory Corruption mailing-list
- 38363 vdb-entry
- 1023644 vdb-entry
- www.trapkit.de
- ADV-2010-0449 vdb-entry vendor-advisory