Alwil Software Avast! Antivirus Aavmker4 Device Driver Local Privilege Escalation Vulnerability
BID:13773
Info
Alwil Software Avast! Antivirus Aavmker4 Device Driver Local Privilege Escalation Vulnerability
| Bugtraq ID: | 13773 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | May 26 2005 12:00AM |
| Updated: | May 26 2005 12:00AM |
| Credit: | Discovery is credited to Piotr Bania <[email protected]>. |
| Vulnerable: |
Avast Antivirus Professional Edition 4.6 Avast Antivirus Home Edition 4.6 |
| Not Vulnerable: | |
Discussion
Alwil Software Avast! Antivirus Aavmker4 Device Driver Local Privilege Escalation Vulnerability
Avast! Antivirus is affected by a local privilege escalation vulnerability.
The vulnerable code resides in the Aavmker4 device driver.
A successful attack can result in memory corruption due to an insecure memory copy operation. This can lead to privilege escalation allowing the attacker to gain ring0 privileges.
This issue has been confirmed in Avast! Antivirus 4.6, however, it is likely that all versions are affected.
Avast! Antivirus is affected by a local privilege escalation vulnerability.
The vulnerable code resides in the Aavmker4 device driver.
A successful attack can result in memory corruption due to an insecure memory copy operation. This can lead to privilege escalation allowing the attacker to gain ring0 privileges.
This issue has been confirmed in Avast! Antivirus 4.6, however, it is likely that all versions are affected.
Exploit / POC
Alwil Software Avast! Antivirus Aavmker4 Device Driver Local Privilege Escalation Vulnerability
It was reported that an exploit has been released for this issue, however, Symantec was not able to locate the exploit code.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
It was reported that an exploit has been released for this issue, however, Symantec was not able to locate the exploit code.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Alwil Software Avast! Antivirus Aavmker4 Device Driver Local Privilege Escalation Vulnerability
Solution:
Reportedly, the latest version (4.6.665) of Avast! is not affected by this issue. This has not been confirmed. Please contact the vendor for more information.
Solution:
Reportedly, the latest version (4.6.665) of Avast! is not affected by this issue. This has not been confirmed. Please contact the vendor for more information.
References
Alwil Software Avast! Antivirus Aavmker4 Device Driver Local Privilege Escalation Vulnerability
References:
References: