Heap overflow

Heap-based buffer overflow in the Avast virtualization driver aswSnx.sys in Avast Internet Security, Pro Antivirus, Premier, and Free Antivirus before 11.1.2253 allows local users to gain privileges via a Unicode file path in an IOCTL request...

CVE-2015-8620

CVE-2015-8620 affects Avast’s Windows virtualization driver aswSnx.sys (Avast Internet Security, Pro Antivirus, Premier, and Free Antivirus). The heap-based buffer overflow is triggered via a Unicode file path in an IOCTL request, enabling local privilege escalation. Affected products use the Ava...

CVE-2015-8620

Heap-based buffer overflow in the Avast virtualization driver aswSnx.sys in Avast Internet Security, Pro Antivirus, Premier, and Free Antivirus before 11.1.2253 allows local users to gain privileges via a Unicode file path in an IOCTL request...

CVE-2016-3986

Avast allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via a crafted PE file, related to authenticode parsing...

Memory corruption

Avast allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via a crafted PE file, related to authenticode parsing...

CVE-2016-3986

CVE-2016-3986 affects Avast Antivirus and is triggered by a crafted PE file, exploiting the authenticode parsing path to cause memory corruption and potentially execute arbitrary code. The vulnerability’s impact is a denial-of-service with memory corruption (and possible code execution). Affected...

CVE-2016-3986

Avast allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via a crafted PE file, related to authenticode parsing...

Avast Battery Saver - BSD license, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Avast Battery Saver published at the 'play' market has multiple vulnerabilities...

Avast Cleanup & Boost - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Avast Cleanup & Boost published at the 'play' market has multiple vulnerabilities...

Avast WiFi Finder & Passwords - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Avast WiFi Finder & Passwords published at the 'play' market has multiple vulnerabilities...

openSUSE Security Update : exim (openSUSE-2016-326)

This update to exim 4.86.2 fixes the following issues : - CVE-2016-1531: local privilege escalation for set-uid root exim when using 'perlstartup' boo968844 Important: Exim now cleans the complete execution environment by default. This affects Exim and subprocesses such as transports calling othe...

Security update for exim (important)

This update to exim 4.86.2 fixes the following issues: CVE-2016-1531: local privilege escalation for set-uid root exim when using 'perlstartup' boo968844 Important: Exim now cleans the complete execution environment by default. This affects Exim and subprocesses such as transports calling other...

Avast! - Authenticode Parsing Memory Corruption

Avast! - Authenticode Parsing Memory Corruption Source: https://code.google.com/p/google-security-research/issues/detail?id=668 The attached PE file causes memory corruption in Avast, it looks related to authenticode parsing. 474.c0c: Access violation - code c0000005 first chance First chance...

Avast - Authenticode Parsing Memory Corruption

Exploit for windows platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=668 The attached PE file causes memory corruption in Avast, it looks related to authenticode parsing. 474.c0c: Access violation - code c0000005 first chance First chance...

Avast Virtualization aswSnx.sys Buffer Overflow Vulnerability

aswSnx.sys handles the 'Sandbox' and 'DeepScreen' features of all Avast Windows products. A buffer overflow vulnerability exists in the Avast Virtualization driver aswSnx.sys v11.1.2245 and earlier. Successful exploitation could allow a local attacker to execute arbitrary code with system...

Avast Antivirus Detection and Status

Avast Antivirus, a commercial antivirus software package for Windows, is installed on the remote host. However, there is a problem with the installation; either its services are not running or its engine and/or virus definitions are out of date. C Tenable Network Security, Inc. include"compat.inc...

Avast Antivirus Path Traversal Vulnerability

The remote Windows host is running Avast Antivirus with a virus definition prior to version 150918-0. It is, therefore, affected by a path traversal vulnerability that occurs when processing ZIP archives. An unauthenticated, remote attacker can exploit this, via a crafted ZIP archive, to delete o...

Avast! Antivirus 'strcpy()' function stack buffer overflow vulnerability

Avast! Antivirus is a suite of antivirus programs from the Czech company Avast. A buffer overflow vulnerability exists in the Avast! Antivirus 'strcpy' function, which allows an attacker to exploit the vulnerability to crash the application or execute arbitrary code...

Avast! Antivirus 'JetDb::IsExploited4x' Security Bypass Vulnerability

Avast! Antivirus is a suite of antivirus programs from the Czech company Avast. A security vulnerability exists in Avast! Antivirus 'JetDb::IsExploited4x' that allows attackers to bypass security restrictions and perform unauthorized operations...

Avast! Antivirus 'filevirus_ttf()' function remote integer overflow vulnerability

Avast! Antivirus is a suite of antivirus programs from the Czech company Avast. A remote integer overflow vulnerability exists in the Avast! Antivirus 'filevirusttf' function, which could be exploited by an attacker to crash an application or execute arbitrary code...