Avast! Antivirus 'aavmKer4.sys' Driver Local Privilege Escalation Vulnerability
BID:36888
Info
Avast! Antivirus 'aavmKer4.sys' Driver Local Privilege Escalation Vulnerability
| Bugtraq ID: | 36888 |
| Class: | Input Validation Error |
| CVE: |
CVE-2009-3523 |
| Remote: | No |
| Local: | Yes |
| Published: | Sep 24 2009 12:00AM |
| Updated: | Mar 19 2015 09:46AM |
| Credit: | NT Internals |
| Vulnerable: |
Avast! Antivirus Professional Edition 4.8.1351 Avast! Antivirus Professional Edition 4.8.1335 Avast! Antivirus Professional Edition 4.8.1169 Avast! Antivirus Professional Edition 4.7.1098 Avast! Antivirus Professional Edition 4.7.1043 Avast! Antivirus Professional Edition 4.7.844 Avast! Antivirus Professional Edition 4.7.827 Avast! Antivirus Professional Edition 4.6.691 Avast! Antivirus Professional Edition 4.6.665 Avast! Antivirus Professional Edition 4.6.652 Avast! Antivirus Professional Edition 4.6.603 Avast! Antivirus Professional Edition 4.6 Avast! Antivirus Home Edition 4.8.1351 Avast! Antivirus Home Edition 4.8.1335 Avast! Antivirus Home Edition 4.8.1169 Avast! Antivirus Home Edition 4.7.1098 Avast! Antivirus Home Edition 4.7.1043 Avast! Antivirus Home Edition 4.7.869 Avast! Antivirus Home Edition 4.7.844 Avast! Antivirus Home Edition 4.7.827 Avast! Antivirus Home Edition 4.6.691 Avast! Antivirus Home Edition 4.6.665 Avast! Antivirus Home Edition 4.6.655 Avast! Antivirus Home Edition 4.6.652 Avast! Antivirus Home Edition 4.6 Avast! Antivirus Home Edition 4.0 |
| Not Vulnerable: |
Avast! Antivirus Professional Edition 4.8.1356 Avast! Antivirus Home Edition 4.8.1356 |
Discussion
Avast! Antivirus 'aavmKer4.sys' Driver Local Privilege Escalation Vulnerability
Avast! Antivirus is prone to a local privilege-escalation vulnerability.
Local attackers can exploit this issue to execute arbitrary code with superuser privileges and completely compromise the affected computer. Failed exploit attempts will result in a denial-of-service condition.
Versions prior to Avast! Antivirus 4.8.1356 are vulnerable.
Avast! Antivirus is prone to a local privilege-escalation vulnerability.
Local attackers can exploit this issue to execute arbitrary code with superuser privileges and completely compromise the affected computer. Failed exploit attempts will result in a denial-of-service condition.
Versions prior to Avast! Antivirus 4.8.1356 are vulnerable.
Exploit / POC
Avast! Antivirus 'aavmKer4.sys' Driver Local Privilege Escalation Vulnerability
The following exploit code is available:
The following exploit code is available:
Solution / Fix
Avast! Antivirus 'aavmKer4.sys' Driver Local Privilege Escalation Vulnerability
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
Avast! Antivirus 'aavmKer4.sys' Driver Local Privilege Escalation Vulnerability
References:
References:
- Avast! (AavmKer4.sys) Local Privilege Escalation Vulnerability (NT Internals)
- Avast! Homepage (Avast!)