Avast 4.8.1351.0 antivirus aswMon2.sys Kernel Memory Corruption

No description provided by source. / Avast 4.8.1351.0 antivirus aswMon2.sys Kernel Memory Corruption Author: Giuseppe 'Evilcry' Bonfa' E-Mail: evilcry AT gmail DOT com Website: http://evilcry.netsons.org http://evilcodecave.blogspot.com http://evilfingers.com Vendor: Notified No L.P.E. for kiddie...

Avast! Antivirus 'aswRsr.sys'驱动本地特权提升漏洞

Bugraq ID: 37031 Avast! Antivirus Professional是一款流行的反病毒应用程序。 Avast's aswRdr.sys没有过滤用户提供的输入IOCTL，这可导致内核触发堆溢出，使系统触发蓝屏，也可能造成特权提升。 Avast! Antivirus Professional Edition 4.8.1356 Avast! Antivirus Professional Edition 4.8.1351 Avast! Antivirus Professional Edition 4.8.1335 Avast! Antivirus Professional...

Avast! 4.8.1351.0 AntiVirus - aswMon2.sys Kernel Memory Corruption

Avast! 4.8.1351.0 AntiVirus - aswMon2.sys Kernel Memory Corruption / Avast 4.8.1351.0 antivirus aswMon2.sys Kernel Memory Corruption Author: Giuseppe 'Evilcry' Bonfa' E-Mail: evilcry AT gmail DOT com Website: http://evilcry.netsons.org http://evilcodecave.blogspot.com http://evilfingers.com Vendo...

Avast 4.8.1351.0 antivirus aswMon2.sys Kernel Memory Corruption

Exploit for unknown platform in category dos / poc =============================================================== Avast 4.8.1351.0 antivirus aswMon2.sys Kernel Memory Corruption =============================================================== Title: Avast 4.8.1351.0 antivirus aswMon2.sys Kernel...

Avast! 4.8.1351.0 AntiVirus - 'aswMon2.sys' Kernel Memory Corruption

/ Avast 4.8.1351.0 antivirus aswMon2.sys Kernel Memory Corruption Author: Giuseppe 'Evilcry' Bonfa' E-Mail: evilcry AT gmail DOT com Website: http://evilcry.netsons.org http://evilcodecave.blogspot.com http://evilfingers.com Vendor: Notified No L.P.E. for kiddies / define WIN32LEANANDMEAN include...

Avast! AntiVirus 4.8.1356 - aswRdr.sys Driver Privilege Escalation

Avast! AntiVirus 4.8.1356 - aswRdr.sys Driver Privilege Escalation // source: https://www.securityfocus.com/bid/37031/info Avast! Antivirus is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to execute arbitrary code with superuser privileges and...

Avast! AntiVirus 4.8.1356 - 'aswRdr.sys' Driver Privilege Escalation

// source: https://www.securityfocus.com/bid/37031/info Avast! Antivirus is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to execute arbitrary code with superuser privileges and completely compromise the affected computer. Failed exploit attempts will...

Avast! Antivirus aavmKer4.sys驱动本地权限提升漏洞

BUGTRAQ ID: 36888 CVECAN ID: CVE-2009-3523 Avast! Antivirus是ALMIL公司开发的杀毒软件。 Avast! Antivirus的AavmKer4.sys内核驱动没有正确地处理IOCTL（0xB2D6000C和0xB2D60034）请求，驱动将不可信任的用户态代码传送给了内核地址用作参数，本地用户通过特制的IOCTL调用就可以执行任意内核态指令。 ALWIL Software Avast! Antivirus 4.8 厂商补丁： ALWIL Software --------------...

avast! Professional Edition < 4.8.1356 Multiple Vulnerabilities

The remote Windows host is running avast! Professional Edition. The installed version of avast! Professional Edition is potentially affected by multiple issues : - A local privilege escalation vulnerability because the 'avast4.ini' file is created with insecure permissions on setup. CVE-2009-3524...

Avast!杀毒软件本地权限提升和拒绝服务漏洞

BUGTRAQ ID: 36798,36796 CVE ID: CVE-2009-3524 Avast! Antivirus是ALMIL公司开发的杀毒软件。 Avast!以不安全权限安装了一些程序文件，对Files%\Alwil Software\Avast4\Data路径下的文件和文件夹分配了Full Control权限，任何非特权用户都可以修改、删除或更改DATA文件夹中文件的权限。例如，本地非特权用户可以修改%Program...

Avast! Multiple Vulnerabilities

ShineShadow Security Report 22102009-12 TITLE Avast! Multiple Vulnerabilities BACKGROUND Avast! antivirus software represents complete virus protection, offering full desktop security including a resident shield. Daily automatic updates ensure continuous data protection against all types of malwa...

Avast! Multiple Vulnerabilities

No description provided by source. ShineShadow Security Report 22102009-12 TITLE Avast! Multiple Vulnerabilities BACKGROUND Avast! antivirus software represents complete virus protection, offering full desktop \ security including a resident shield. Daily automatic updates ensure continuous data ...

Avast! Antivirus weak permissions

Weak permissions for installation folder...

avast! Multiple Vulnerabilities - Oct09 (Windows)

This host is installed with avast! AntiVirus and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbavastavmultvulnoct09win.nasl 7113 2017-09-13 06:03:30Z cfischer $ avast! Multiple Vulnerabilities - Oct09 Windows Authors: Sharath S Copyright: Copyright c 2009 Greenbone...

Avast (Free / Business) AntiVirus Detection (Windows SMB Login)

Detects the installed version of Avast Free / Business AntiVirus on Windows. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

avast! Multiple Vulnerabilities (Oct 2009) - Windows

avast! AntiVirus is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:avast:antivirus";...

Code injection

Unspecified vulnerability in ashWsFtr.dll in avast! Home and Professional for Windows before 4.8.1356 has unknown impact and local attack vectors...

Memory corruption

aavmKer4.sys in avast! Home and Professional for Windows before 4.8.1356 does not properly validate input to IOCTLs 1 0xb2d6000c and 2 0xb2d60034, which allows local users to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption, a different vulnerabilit...

CVE-2009-3522

Stack-based buffer overflow in aswMon2.sys in avast! Home and Professional for Windows 4.8.1351, and possibly other versions before 4.8.1356, allows local users to cause a denial of service system crash and possibly gain privileges via a crafted IOCTL request to IOCTL 0xb2c80018...

CVE-2009-3523

aavmKer4.sys in avast! Home and Professional for Windows before 4.8.1356 does not properly validate input to IOCTLs 1 0xb2d6000c and 2 0xb2d60034, which allows local users to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption, a different vulnerabilit...