PT-2016-3938 · Avast · Avast Premier+3

Kyriakos Economou · Publicado 2016-04-13 · Atualizado 2021-03-26 · CVE-2015-8620

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Avast Internet Security versions prior to 11.1.2253 Avast Pro Antivirus versions prior to 11.1.2253 Avast Premier versions prior to 11.1.2253 Avast Free Antivirus versions prior to 11.1.2253

Description A heap-based buffer overflow issue exists in the Avast virtualization driver, aswSnx.sys, which can be exploited by local users to gain privileges. This is achieved by using a Unicode file path in an IOCTL request.

Recommendations For Avast Internet Security versions prior to 11.1.2253, update to version 11.1.2253 or later. For Avast Pro Antivirus versions prior to 11.1.2253, update to version 11.1.2253 or later. For Avast Premier versions prior to 11.1.2253, update to version 11.1.2253 or later. For Avast Free Antivirus versions prior to 11.1.2253, update to version 11.1.2253 or later.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2015-8620

Produtos afetados

Avast Free Antivirus

Avast Internet Security

Avast Premier

Avast Pro Antivirus

Referências · 5

• 🔥 http://seclists.org/fulldisclosure/2016/Feb/94 · Exploit
• 🔥 https://nettitude.co.uk/exploiting-a-kernel-paged-pool-buffer-overflow-in-avast-virtualization-driver · Exploit
• 🔥 http://packetstormsecurity.com/files/135859/Avast-11.1.2245-Heap-Overflow.html · Exploit
• http://securitytracker.com/id/1035093 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-8620 · Nota de Segurança