Avast! AntiVirus 4.8.1356 - 'aswRdr.sys' Driver Privilege Escalation

// source: https://www.securityfocus.com/bid/37031/info Avast! Antivirus is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to execute arbitrary code with superuser privileges and completely compromise the affected computer. Failed exploit attempts will...

Avast! Antivirus aavmKer4.sys驱动本地权限提升漏洞

BUGTRAQ ID: 36888 CVECAN ID: CVE-2009-3523 Avast! Antivirus是ALMIL公司开发的杀毒软件。 Avast! Antivirus的AavmKer4.sys内核驱动没有正确地处理IOCTL（0xB2D6000C和0xB2D60034）请求，驱动将不可信任的用户态代码传送给了内核地址用作参数，本地用户通过特制的IOCTL调用就可以执行任意内核态指令。 ALWIL Software Avast! Antivirus 4.8 厂商补丁： ALWIL Software --------------...

Avast!杀毒软件本地权限提升和拒绝服务漏洞

BUGTRAQ ID: 36798,36796 CVE ID: CVE-2009-3524 Avast! Antivirus是ALMIL公司开发的杀毒软件。 Avast!以不安全权限安装了一些程序文件，对Files%\Alwil Software\Avast4\Data路径下的文件和文件夹分配了Full Control权限，任何非特权用户都可以修改、删除或更改DATA文件夹中文件的权限。例如，本地非特权用户可以修改%Program...

avast! Professional Edition < 4.8.1356 Multiple Vulnerabilities

The remote Windows host is running avast! Professional Edition. The installed version of avast! Professional Edition is potentially affected by multiple issues : - A local privilege escalation vulnerability because the 'avast4.ini' file is created with insecure permissions on setup. CVE-2009-3524...

Avast! Antivirus weak permissions

Weak permissions for installation folder...

Avast! Multiple Vulnerabilities

No description provided by source. ShineShadow Security Report 22102009-12 TITLE Avast! Multiple Vulnerabilities BACKGROUND Avast! antivirus software represents complete virus protection, offering full desktop \ security including a resident shield. Daily automatic updates ensure continuous data ...

Avast! Multiple Vulnerabilities

ShineShadow Security Report 22102009-12 TITLE Avast! Multiple Vulnerabilities BACKGROUND Avast! antivirus software represents complete virus protection, offering full desktop security including a resident shield. Daily automatic updates ensure continuous data protection against all types of malwa...

avast! Multiple Vulnerabilities - Oct09 (Windows)

This host is installed with avast! AntiVirus and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbavastavmultvulnoct09win.nasl 7113 2017-09-13 06:03:30Z cfischer $ avast! Multiple Vulnerabilities - Oct09 Windows Authors: Sharath S Copyright: Copyright c 2009 Greenbone...

Avast (Free / Business) AntiVirus Detection (Windows SMB Login)

Detects the installed version of Avast Free / Business AntiVirus on Windows. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

avast! Multiple Vulnerabilities (Oct 2009) - Windows

avast! AntiVirus is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:avast:antivirus";...

CVE-2009-3523

aavmKer4.sys in avast! Home and Professional for Windows before 4.8.1356 does not properly validate input to IOCTLs 1 0xb2d6000c and 2 0xb2d60034, which allows local users to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption, a different vulnerabilit...

Memory corruption

aavmKer4.sys in avast! Home and Professional for Windows before 4.8.1356 does not properly validate input to IOCTLs 1 0xb2d6000c and 2 0xb2d60034, which allows local users to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption, a different vulnerabilit...

CVE-2009-3522

Stack-based buffer overflow in aswMon2.sys in avast! Home and Professional for Windows 4.8.1351, and possibly other versions before 4.8.1356, allows local users to cause a denial of service system crash and possibly gain privileges via a crafted IOCTL request to IOCTL 0xb2c80018...

Code injection

Unspecified vulnerability in ashWsFtr.dll in avast! Home and Professional for Windows before 4.8.1356 has unknown impact and local attack vectors...

Stack overflow

Stack-based buffer overflow in aswMon2.sys in avast! Home and Professional for Windows 4.8.1351, and possibly other versions before 4.8.1356, allows local users to cause a denial of service system crash and possibly gain privileges via a crafted IOCTL request to IOCTL 0xb2c80018...

CVE-2009-3524

Unspecified vulnerability in ashWsFtr.dll in avast! Home and Professional for Windows before 4.8.1356 has unknown impact and local attack vectors...

CVE-2009-3523

CVE-2009-3523 concerns an interaction with the driver aavmKer4.sys in Avast! for Windows prior to 4.8.1356, where input to IOCTLs (1) 0xb2d6000c and (2) 0xb2d60034 is not properly validated. This leads to memory corruption and enables local privilege escalation via crafted IOCTL requests that tar...

CVE-2009-3522

Stack-based buffer overflow in aswMon2.sys in avast! Home and Professional for Windows 4.8.1351, and possibly other versions before 4.8.1356, allows local users to cause a denial of service system crash and possibly gain privileges via a crafted IOCTL request to IOCTL 0xb2c80018...

CVE-2009-3524

Unspecified vulnerability in ashWsFtr.dll in avast! Home and Professional for Windows before 4.8.1356 has unknown impact and local attack vectors...

CVE-2009-3524

Avast! avast4.ini insecure permissions in the Avast4 Data folder allowed a local attacker to modify avast4.ini (ISAPIFilter1) to point to a malicious DLL, which could load with SYSTEM privileges after restart. The issue was addressed in Avast! Professional/Home editions up to 4.8.1356; another ve...