PT-2009-6230 · Avast · Avast!

Publicado 2009-11-23 · Atualizado 2018-10-10 · CVE-2009-4049

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions avast! Home and Professional version 4.8.1356.0

Description The issue is related to a heap-based buffer overflow in the aswRdr.sys driver, which can be exploited by local users. This can be achieved by passing crafted arguments to the IOCTL 0x80002024, potentially leading to memory corruption or privilege escalation.

Recommendations For avast! Home and Professional version 4.8.1356.0, consider updating to a newer version that addresses this issue, as no specific fix is provided for this version.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2009-4049

Produtos afetados

Avast!

Referências · 8

• 🔥 http://securityfocus.com/bid/37031 · Exploit
• 🔥 https://exploit-db.com/exploits/33360 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-4049 · Nota de Segurança
• http://efblog.net/2009/11/avast-aswrdrsys-kernel-pool-corruption.html · Nota
• https://evilfingers.com/advisory/Advisory/Avast_aswRdr_sys_Kernel_Pool_Corruption_and_Local_Privilege_Escalation.php · Nota
• http://secunia.com/advisories/37368 · Aviso do Fabricante
• http://securityfocus.com/archive/1/507891/100/0/threaded · Nota
• http://vupen.com/english/advisories/2009/3266 · Aviso do Fabricante