KLA10414 ACe vulnerability in Avast! Antivirus

Improper input validation was found in Avast! Antivirus. By exploiting this vulnerability malicious users can cause denial of service and possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed IOCTL request.

Original advisories

Related products

avast!-Home-Professional

CVE list

CVE-2010-0705 high

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Avast! Antivirus Home & Professional versions from 4.8 to 4.8.1368.0Avast! Antivirus Home & Professional versions from 5.0 to 5.0.418.0