Code injection

Unspecified vulnerability in ashWsFtr.dll in avast! Home and Professional for Windows before 4.8.1356 has unknown impact and local attack vectors...

CVE-2009-3524

Avast! avast4.ini insecure permissions in the Avast4 Data folder allowed a local attacker to modify avast4.ini (ISAPIFilter1) to point to a malicious DLL, which could load with SYSTEM privileges after restart. The issue was addressed in Avast! Professional/Home editions up to 4.8.1356; another ve...

CVE-2009-3524

Unspecified vulnerability in ashWsFtr.dll in avast! Home and Professional for Windows before 4.8.1356 has unknown impact and local attack vectors...