Avast! Antivirus 'aavmKer4.sys' Driver IOCTL Handling Local Privilege Escalation Vulnerability
BID:38363
Info
Avast! Antivirus 'aavmKer4.sys' Driver IOCTL Handling Local Privilege Escalation Vulnerability
| Bugtraq ID: | 38363 |
| Class: | Design Error |
| CVE: |
CVE-2010-0705 |
| Remote: | No |
| Local: | Yes |
| Published: | Feb 22 2010 12:00AM |
| Updated: | Apr 13 2015 09:02PM |
| Credit: | Tobias Klein |
| Vulnerable: |
Avast Antivirus Professional Edition 4.8.1356 Avast Antivirus Professional Edition 4.8.1351 Avast Antivirus Professional Edition 4.8.1335 Avast Antivirus Professional Edition 4.8.1169 Avast Antivirus Professional Edition 4.7.1098 Avast Antivirus Professional Edition 4.7.1043 Avast Antivirus Professional Edition 4.7.844 Avast Antivirus Professional Edition 4.7.827 Avast Antivirus Professional Edition 4.6.691 Avast Antivirus Professional Edition 4.6.665 Avast Antivirus Professional Edition 4.6.652 Avast Antivirus Professional Edition 4.6.603 Avast Antivirus Professional Edition 4.6 Avast Antivirus Professional Edition 4.0 Avast Antivirus Home Edition 4.8.1356 Avast Antivirus Home Edition 4.8.1351 Avast Antivirus Home Edition 4.8.1335 Avast Antivirus Home Edition 4.8.1169 Avast Antivirus Home Edition 4.7.1098 Avast Antivirus Home Edition 4.7.1043 Avast Antivirus Home Edition 4.7.869 Avast Antivirus Home Edition 4.7.844 Avast Antivirus Home Edition 4.7.827 Avast Antivirus Home Edition 4.6.691 Avast Antivirus Home Edition 4.6.665 Avast Antivirus Home Edition 4.6.655 Avast Antivirus Home Edition 4.6.652 Avast Antivirus Home Edition 4.6 Avast Antivirus Home Edition 4.0 |
| Not Vulnerable: |
Avast Antivirus Professional Edition 5.0.418 Avast Antivirus Home Edition 5.0.418 |
Discussion
Avast! Antivirus 'aavmKer4.sys' Driver IOCTL Handling Local Privilege Escalation Vulnerability
Avast! Antivirus is prone to a local privilege-escalation vulnerability.
Local attackers can exploit this issue to execute arbitrary code with superuser privileges and completely compromise the affected computer. Failed exploit attempts will result in a denial-of-service condition.
Versions prior to Avast! Antivirus 5.0.418 are vulnerable.
Avast! Antivirus is prone to a local privilege-escalation vulnerability.
Local attackers can exploit this issue to execute arbitrary code with superuser privileges and completely compromise the affected computer. Failed exploit attempts will result in a denial-of-service condition.
Versions prior to Avast! Antivirus 5.0.418 are vulnerable.
Exploit / POC
Avast! Antivirus 'aavmKer4.sys' Driver IOCTL Handling Local Privilege Escalation Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Avast! Antivirus 'aavmKer4.sys' Driver IOCTL Handling Local Privilege Escalation Vulnerability
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
Avast! Antivirus 'aavmKer4.sys' Driver IOCTL Handling Local Privilege Escalation Vulnerability
References:
References:
- avast! 4.8 and 5.0 aavmker4.sys Kernel Memory (Tobias Klein)
- Avast! Homepage (Avast!)
- New avast program update 5.0.418 (Avast!)