Avast! Antivirus 'aswRdr.sys' Driver Local Privilege Escalation Vulnerability
BID:37031
Info
Avast! Antivirus 'aswRdr.sys' Driver Local Privilege Escalation Vulnerability
| Bugtraq ID: | 37031 |
| Class: | Input Validation Error |
| CVE: |
CVE-2009-4049 |
| Remote: | No |
| Local: | Yes |
| Published: | Nov 16 2009 12:00AM |
| Updated: | Apr 13 2015 09:06PM |
| Credit: | Giuseppe 'Evilcry' Bonfa and AbdulAziz Hariri |
| Vulnerable: |
Avast Antivirus Professional Edition 4.8.1356 Avast Antivirus Professional Edition 4.8.1351 Avast Antivirus Professional Edition 4.8.1335 Avast Antivirus Professional Edition 4.8.1169 Avast Antivirus Professional Edition 4.7.1098 Avast Antivirus Professional Edition 4.7.1043 Avast Antivirus Professional Edition 4.7.844 Avast Antivirus Professional Edition 4.7.827 Avast Antivirus Professional Edition 4.6.691 Avast Antivirus Professional Edition 4.6.665 Avast Antivirus Professional Edition 4.6.652 Avast Antivirus Professional Edition 4.6.603 Avast Antivirus Professional Edition 4.6 Avast Antivirus Professional Edition 4.0 Avast Antivirus Home Edition 4.8.1356 Avast Antivirus Home Edition 4.8.1351 Avast Antivirus Home Edition 4.8.1335 Avast Antivirus Home Edition 4.8.1169 Avast Antivirus Home Edition 4.7.1098 Avast Antivirus Home Edition 4.7.1043 Avast Antivirus Home Edition 4.7.869 Avast Antivirus Home Edition 4.7.844 Avast Antivirus Home Edition 4.7.827 Avast Antivirus Home Edition 4.6.691 Avast Antivirus Home Edition 4.6.665 Avast Antivirus Home Edition 4.6.655 Avast Antivirus Home Edition 4.6.652 Avast Antivirus Home Edition 4.6 Avast Antivirus Home Edition 4.0 |
| Not Vulnerable: | |
Discussion
Avast! Antivirus 'aswRdr.sys' Driver Local Privilege Escalation Vulnerability
Avast! Antivirus is prone to a local privilege-escalation vulnerability.
Local attackers can exploit this issue to execute arbitrary code with superuser privileges and completely compromise the affected computer. Failed exploit attempts will result in a denial-of-service condition.
Avast! Antivirus 4.8.1356 is vulnerable; other versions may also be affected.
Avast! Antivirus is prone to a local privilege-escalation vulnerability.
Local attackers can exploit this issue to execute arbitrary code with superuser privileges and completely compromise the affected computer. Failed exploit attempts will result in a denial-of-service condition.
Avast! Antivirus 4.8.1356 is vulnerable; other versions may also be affected.
Exploit / POC
Avast! Antivirus 'aswRdr.sys' Driver Local Privilege Escalation Vulnerability
The following exploit code is available:
The following exploit code is available:
Solution / Fix
Avast! Antivirus 'aswRdr.sys' Driver Local Privilege Escalation Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Avast! Antivirus 'aswRdr.sys' Driver Local Privilege Escalation Vulnerability
References:
References: