PT-2009-6230 · Avast · Avast!

Published 2009-11-23 · Updated 2018-10-10 · CVE-2009-4049

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions avast! Home and Professional version 4.8.1356.0

Description The issue is related to a heap-based buffer overflow in the aswRdr.sys driver, which can be exploited by local users. This can be achieved by passing crafted arguments to the IOCTL 0x80002024, potentially leading to memory corruption or privilege escalation.

Recommendations For avast! Home and Professional version 4.8.1356.0, consider updating to a newer version that addresses this issue, as no specific fix is provided for this version.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-4049

Affected Products

Avast!

References · 8

• 🔥 http://securityfocus.com/bid/37031 · Exploit
• 🔥 https://exploit-db.com/exploits/33360 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-4049 · Security Note
• http://secunia.com/advisories/37368 · Vendor Advisory
• http://vupen.com/english/advisories/2009/3266 · Vendor Advisory
• http://efblog.net/2009/11/avast-aswrdrsys-kernel-pool-corruption.html · Note
• https://evilfingers.com/advisory/Advisory/Avast_aswRdr_sys_Kernel_Pool_Corruption_and_Local_Privilege_Escalation.php · Note
• http://securityfocus.com/archive/1/507891/100/0/threaded · Note