CVE-2009-3523
Summary
| CVE | CVE-2009-3523 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2009-10-01 17:00:00 UTC |
| Updated | 2017-09-19 01:29:00 UTC |
| Description | aavmKer4.sys in avast! Home and Professional for Windows before 4.8.1356 does not properly validate input to IOCTLs (1) 0xb2d6000c and (2) 0xb2d60034, which allows local users to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption, a different vulnerability than CVE-2008-1625. |
Risk And Classification
Problem Types: CWE-20
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Avast | Avast Antivirus Home | 4.7.1043 | All | windows | All |
| Application | Avast | Avast Antivirus Home | 4.7.1098 | All | windows | All |
| Application | Avast | Avast Antivirus Home | 4.7.827 | All | windows | All |
| Application | Avast | Avast Antivirus Home | 4.7.844 | All | windows | All |
| Application | Avast | Avast Antivirus Home | 4.7.869 | All | windows | All |
| Application | Avast | Avast Antivirus Home | 4.8.1169 | All | windows | All |
| Application | Avast | Avast Antivirus Home | 4.8.1195 | All | windows | All |
| Application | Avast | Avast Antivirus Home | 4.8.1201 | All | windows | All |
| Application | Avast | Avast Antivirus Home | 4.8.1227 | All | windows | All |
| Application | Avast | Avast Antivirus Home | 4.8.1229 | All | windows | All |
| Application | Avast | Avast Antivirus Home | 4.8.1282 | All | windows | All |
| Application | Avast | Avast Antivirus Home | 4.8.1290 | All | windows | All |
| Application | Avast | Avast Antivirus Home | 4.8.1296 | All | windows | All |
| Application | Avast | Avast Antivirus Home | 4.8.1335 | All | windows | All |
| Application | Avast | Avast Antivirus Home | 4.7.1043 | All | windows | All |
| Application | Avast | Avast Antivirus Home | 4.7.1098 | All | windows | All |
| Application | Avast | Avast Antivirus Home | 4.7.827 | All | windows | All |
| Application | Avast | Avast Antivirus Home | 4.7.844 | All | windows | All |
| Application | Avast | Avast Antivirus Home | 4.7.869 | All | windows | All |
| Application | Avast | Avast Antivirus Home | 4.8.1169 | All | windows | All |
| Application | Avast | Avast Antivirus Home | 4.8.1195 | All | windows | All |
| Application | Avast | Avast Antivirus Home | 4.8.1201 | All | windows | All |
| Application | Avast | Avast Antivirus Home | 4.8.1227 | All | windows | All |
| Application | Avast | Avast Antivirus Home | 4.8.1229 | All | windows | All |
| Application | Avast | Avast Antivirus Home | 4.8.1282 | All | windows | All |
| Application | Avast | Avast Antivirus Home | 4.8.1290 | All | windows | All |
| Application | Avast | Avast Antivirus Home | 4.8.1296 | All | windows | All |
| Application | Avast | Avast Antivirus Home | 4.8.1335 | All | windows | All |
| Application | Avast | Avast Antivirus Home | All | All | windows | All |
| Application | Avast | Avast Antivirus Professional | 4.7.1043 | All | windows | All |
| Application | Avast | Avast Antivirus Professional | 4.7.1098 | All | windows | All |
| Application | Avast | Avast Antivirus Professional | 4.7.827 | All | windows | All |
| Application | Avast | Avast Antivirus Professional | 4.7.844 | All | windows | All |
| Application | Avast | Avast Antivirus Professional | 4.8.1169 | All | windows | All |
| Application | Avast | Avast Antivirus Professional | 4.8.1195 | All | windows | All |
| Application | Avast | Avast Antivirus Professional | 4.8.1201 | All | windows | All |
| Application | Avast | Avast Antivirus Professional | 4.8.1227 | All | windows | All |
| Application | Avast | Avast Antivirus Professional | 4.8.1229 | All | windows | All |
| Application | Avast | Avast Antivirus Professional | 4.8.1282 | All | windows | All |
| Application | Avast | Avast Antivirus Professional | 4.8.1290 | All | windows | All |
| Application | Avast | Avast Antivirus Professional | 4.8.1296 | All | windows | All |
| Application | Avast | Avast Antivirus Professional | 4.8.1335 | All | windows | All |
| Application | Avast | Avast Antivirus Professional | 4.7.1043 | All | windows | All |
| Application | Avast | Avast Antivirus Professional | 4.7.1098 | All | windows | All |
| Application | Avast | Avast Antivirus Professional | 4.7.827 | All | windows | All |
| Application | Avast | Avast Antivirus Professional | 4.7.844 | All | windows | All |
| Application | Avast | Avast Antivirus Professional | 4.8.1169 | All | windows | All |
| Application | Avast | Avast Antivirus Professional | 4.8.1195 | All | windows | All |
| Application | Avast | Avast Antivirus Professional | 4.8.1201 | All | windows | All |
| Application | Avast | Avast Antivirus Professional | 4.8.1227 | All | windows | All |
| Application | Avast | Avast Antivirus Professional | 4.8.1229 | All | windows | All |
| Application | Avast | Avast Antivirus Professional | 4.8.1282 | All | windows | All |
| Application | Avast | Avast Antivirus Professional | 4.8.1290 | All | windows | All |
| Application | Avast | Avast Antivirus Professional | 4.8.1296 | All | windows | All |
| Application | Avast | Avast Antivirus Professional | 4.8.1335 | All | windows | All |
| Application | Avast | Avast Antivirus Professional | All | All | windows | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| avast! 4 Home/Professional Revision History | CONFIRM | www.avast.com | |
| Repository / Oval Repository | OVAL | oval.cisecurity.org | |
| avast! Home/Professional "aswMon2" Buffer Overflow - Secunia Advisories - Vulnerability Information - Secunia.com | SECUNIA | secunia.com | Vendor Advisory |
| NTIADV0904 - Avast! (AavmKer4.sys) Local Privilege Escalation Vulnerability | MISC | www.ntinternals.org | Exploit |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.