PT-2016-3938 · Avast · Avast Premier+3

Kyriakos Economou · Published 2016-04-13 · Updated 2021-03-26 · CVE-2015-8620

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Avast Internet Security versions prior to 11.1.2253 Avast Pro Antivirus versions prior to 11.1.2253 Avast Premier versions prior to 11.1.2253 Avast Free Antivirus versions prior to 11.1.2253

Description A heap-based buffer overflow issue exists in the Avast virtualization driver, aswSnx.sys, which can be exploited by local users to gain privileges. This is achieved by using a Unicode file path in an IOCTL request.

Recommendations For Avast Internet Security versions prior to 11.1.2253, update to version 11.1.2253 or later. For Avast Pro Antivirus versions prior to 11.1.2253, update to version 11.1.2253 or later. For Avast Premier versions prior to 11.1.2253, update to version 11.1.2253 or later. For Avast Free Antivirus versions prior to 11.1.2253, update to version 11.1.2253 or later.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2015-8620

Affected Products

Avast Free Antivirus

Avast Internet Security

Avast Premier

Avast Pro Antivirus

References · 5

• 🔥 http://seclists.org/fulldisclosure/2016/Feb/94 · Exploit
• 🔥 https://nettitude.co.uk/exploiting-a-kernel-paged-pool-buffer-overflow-in-avast-virtualization-driver · Exploit
• 🔥 http://packetstormsecurity.com/files/135859/Avast-11.1.2245-Heap-Overflow.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-8620 · Security Note
• http://securitytracker.com/id/1035093 · Note