Unscored severity · published Apr 2, 2008
CVE-2008-1625
aavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to IOCTL 0xb2d60030, which allows local users to gain privileges via certain IOCTL…
–
CVSS
0.7%
EPSS
No
On KEV
Description
aavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to IOCTL 0xb2d60030, which allows local users to gain privileges via certain IOCTL requests.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 53% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AA
Avast Antivirus Home · Avast
4.7.827; 4.7.844; 4.7.869; 4.7.1043; 4.7.1098 · source: NVD
AA
Avast Antivirus Professional · Avast
4.7.827; 4.7.844; 4.7.1043; 4.7.1098 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-1625
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-1625
Vendor Advisory
http://secunia.com/advisories/29605
www.avast.com
http://www.avast.com/eng/avast-4-home_pro-revision-history.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/490321/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/28502
www.securitytracker.com
http://www.securitytracker.com/id?1019732
www.trapkit.de
http://www.trapkit.de/advisories/TKADV2008-002.txt
More from Avast Antivirus Home
–
CVE-2010-0705
Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly validate input to IOCTL 0xb2d60030, which allows local…
–
CVE-2009-4049
Heap-based buffer overflow in aswRdr.sys (aka the TDI RDR driver) in avast! Home and Professional 4.8.1356.0 allows local users to cause a denial of service (memory corruption) or…
–
CVE-2009-3524
Unspecified vulnerability in ashWsFtr.dll in avast! Home and Professional for Windows before 4.8.1356 has unknown impact and local attack vectors
–
CVE-2009-3523
aavmKer4.sys in avast! Home and Professional for Windows before 4.8.1356 does not properly validate input to IOCTLs (1) 0xb2d6000c and (2) 0xb2d60034, which allows local users to…
–
CVE-2009-3522
Stack-based buffer overflow in aswMon2.sys in avast! Home and Professional for Windows 4.8.1351, and possibly other versions before 4.8.1356, allows local users to cause a denial…