PT-2010-2456 · Avast · Avast!

Tobias Klein · Published 2010-02-25 · Updated 2018-10-10 · CVE-2010-0705

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions avast! versions 4.8 through 4.8.1368.0 avast! version 5.0 before 5.0.418.0

Description The issue is related to the Aavmker4.sys driver in avast!, which does not properly validate input to IOCTL 0xb2d60030. This allows local users to cause a denial of service, resulting in a system crash, or execute arbitrary code to gain privileges. The exploitation is done via IOCTL requests using crafted kernel addresses that trigger memory corruption.

Recommendations For avast! versions 4.8 through 4.8.1368.0, update to version 4.8.1368.1 or later. For avast! version 5.0 before 5.0.418.0, update to version 5.0.418.0 or later.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2010-0705

Affected Products

Avast!

References · 11

• 🔥 https://exploit-db.com/exploits/12406 · Exploit
• http://vupen.com/english/advisories/2010/0449 · Vendor Advisory
• http://secunia.com/advisories/38677 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0705 · Security Note
• http://forum.avast.com/index.php?topic=55484.0 · Vendor Advisory
• http://secunia.com/advisories/38689 · Vendor Advisory
• http://trapkit.de/advisories/TKADV2010-003.txt · Note
• http://securityfocus.com/bid/38363 · Note
• http://securitytracker.com/id?1023644 · Note
• http://securityfocus.com/archive/1/509710/100/0/threaded · Note
• http://osvdb.org/62510 · Note