Avira Premium Security Suite 'avipbb.sys' Local Privilege Escalation Vulnerability

Bugtraq ID:	44624
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Nov 03 2010 12:00AM
Updated:	Jan 18 2011 10:21AM
Credit:	Nikita Tarakanov
Vulnerable:	AVIRA Premium Security Suite 10.0.0.565
Not Vulnerable:

Avira Premium Security Suite 'avipbb.sys' Local Privilege Escalation Vulnerability

Avira Premium Security Suite is prone to a local privilege-escalation vulnerability.

Local attackers can exploit this issue to execute arbitrary code with SYSTEM-level privileges and completely compromise the affected computer. Failed exploit attempts will result in a denial-of-service condition.

Avira Premium Security Suite 10.0.0.565 is vulnerable; other versions may also be affected.

Avira Premium Security Suite 'avipbb.sys' Local Privilege Escalation Vulnerability

The following proof-of-concept code is available:

• /data/vulnerabilities/exploits/44622.zip

Avira Premium Security Suite 'avipbb.sys' Local Privilege Escalation Vulnerability

Solution:
According to the vendor, the issue has been fixed in 'avipbb.sys' version 10.0.22.19, which was provided as a regular product update. Please contact the vendor for more information.

Avira Premium Security Suite 'avipbb.sys' Local Privilege Escalation Vulnerability

References:

• AVIRA Home Page (AVIRA)