PT-2008-3179 · Avast · Avast!

Publicado 2008-04-02 · Atualizado 2018-10-11 · CVE-2008-1625

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions avast! Home and Professional version 4.7

Description The issue is related to the improper validation of input to IOCTL 0xb2d60030 in the aavmker4.sys driver. This allows local users to gain privileges via certain IOCTL requests.

Recommendations For avast! Home and Professional version 4.7, consider restricting access to the IOCTL 0xb2d60030 request until a patch is available. As a temporary workaround, disabling the aavmker4.sys driver may prevent exploitation, but this may impact system functionality. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-1625

Produtos afetados

Avast!

Referências · 10

• 🔥 https://exploit-db.com/exploits/12406 · Exploit
• http://securityfocus.com/archive/1/490321/100/0/threaded · Nota
• http://secunia.com/advisories/29605 · Aviso do Fabricante
• http://trapkit.de/advisories/TKADV2008-002.txt · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1625 · Nota de Segurança
• http://avast.com/eng/avast-4-home_pro-revision-history.html · Nota
• http://vupen.com/english/advisories/2008/1034/references · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41527 · Nota
• http://securityfocus.com/bid/28502 · Nota
• http://securitytracker.com/id?1019732 · Nota