Unscored severity · published Oct 1, 2009
CVE-2009-3524
Unspecified vulnerability in ashWsFtr.dll in avast! Home and Professional for Windows before 4.8.1356 has unknown impact and local attack vectors
–
CVSS
0.4%
EPSS
No
On KEV
Description
Unspecified vulnerability in ashWsFtr.dll in avast! Home and Professional for Windows before 4.8.1356 has unknown impact and local attack vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AA
Avast Antivirus Home · Avast
through 4.8.1351; 4.7.827; 4.7.844; 4.7.869; 4.7.1043; 4.7.1098; +9 more · source: NVD
AA
Avast Antivirus Professional · Avast
through 4.8.1351; 4.7.827; 4.7.844; 4.7.1043; 4.7.1098; 4.8.1169; +8 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-3524
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-3524
osvdb.org
http://osvdb.org/58403
Vendor Advisory
http://secunia.com/advisories/36858
Vendor Advisory
http://www.avast.com/eng/avast-4-home_pro-revision-history.html
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6509
More from Avast Antivirus Home
–
CVE-2010-0705
Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly validate input to IOCTL 0xb2d60030, which allows local…
–
CVE-2009-4049
Heap-based buffer overflow in aswRdr.sys (aka the TDI RDR driver) in avast! Home and Professional 4.8.1356.0 allows local users to cause a denial of service (memory corruption) or…
–
CVE-2009-3523
aavmKer4.sys in avast! Home and Professional for Windows before 4.8.1356 does not properly validate input to IOCTLs (1) 0xb2d6000c and (2) 0xb2d60034, which allows local users to…
–
CVE-2009-3522
Stack-based buffer overflow in aswMon2.sys in avast! Home and Professional for Windows 4.8.1351, and possibly other versions before 4.8.1356, allows local users to cause a denial…
–
CVE-2008-1625
aavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to IOCTL 0xb2d60030, which allows local users to gain privileges via certain IOCTL…