Avast! Internet Security 'aswtdi.sys' Driver IOCTL Handling Local Denial of Service Vulnerability

Bugtraq ID:	44650
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Nov 04 2010 12:00AM
Updated:	Mar 19 2015 09:09AM
Credit:	Nikita Tarakanov
Vulnerable:	Avast! Internet Security 5.0.677
Not Vulnerable:

Avast! Internet Security 'aswtdi.sys' Driver IOCTL Handling Local Denial of Service Vulnerability

Avast! Internet Security is prone to a local denial-of-service vulnerability.

Local attackers can exploit this issue to cause denial-of-service conditions.

This issue affects Avast! Internet Security 5.0.677; other versions may also be affected.

Avast! Internet Security 'aswtdi.sys' Driver IOCTL Handling Local Denial of Service Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/44650.c

Avast! Internet Security 'aswtdi.sys' Driver IOCTL Handling Local Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].

Avast! Internet Security 'aswtdi.sys' Driver IOCTL Handling Local Denial of Service Vulnerability

References:

• Avast! Homepage (Avast!)