Avast! Home/Professional Local Privilege Escalation Vulnerability

Bugtraq ID:	28502
Class:	Input Validation Error
CVE:	CVE-2008-1625
Remote:	No
Local:	Yes
Published:	Mar 30 2008 12:00AM
Updated:	May 07 2015 05:31PM
Credit:	Tobias Klein
Vulnerable:	Avast Antivirus Professional Edition 4.7.1098 Avast Antivirus Professional Edition 4.7.1043 Avast Antivirus Professional Edition 4.7.844 Avast Antivirus Professional Edition 4.7.827 Avast Antivirus Home Edition 4.7.1098 Avast Antivirus Home Edition 4.7.1043 Avast Antivirus Home Edition 4.7.869 Avast Antivirus Home Edition 4.7.844 Avast Antivirus Home Edition 4.7.827
Not Vulnerable:	Avast Antivirus Professional Edition 4.8.1169 Avast Antivirus Home Edition 4.8.1169

Avast! Home/Professional Local Privilege Escalation Vulnerability

Avast! is prone to a local privilege-escalation vulnerability because it fails to adequately sanitize user-supplied data.

Attackers can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful attacks will completely compromise affected computers.

Versions prior to Avast! Home/Professional 4.8.1169 are vulnerable.

Avast! Home/Professional Local Privilege Escalation Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/28502.py

Avast! Home/Professional Local Privilege Escalation Vulnerability

Solution:
The vendor released Avast! Home/Professional 4.8.1169 to address this issue. Please see the references and contact the vendor for information on how to obtain and apply the fix.

Avast! Home/Professional Local Privilege Escalation Vulnerability

References:

• avast! 4 Home/Professional Revision History (Avast!)
  
• avast! 4.7 aavmker4.sys Kernel Memory Corruption (Tobias Klein)
  
• [TKADV2008-002] avast! 4.7 aavmker4.sys Kernel Memory Corruption ("Tobias Klein" )