Lucene search
MitreCVE-2009-3523HistoryOct 01, 2009 - 5:00 p.m.
CVE-2009-3523
2009-10-0117:00:00
CWE-20
mitre
web.nvd.nist.gov
33
avast
windows
cve
2009
3523
privilege escalation
vulnerability
CVSS2
6.9
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
AI Score
6.3
Confidence
Low
EPSS
0
Percentile
5.1%
aavmKer4.sys in avast! Home and Professional for Windows before 4.8.1356 does not properly validate input to IOCTLs (1) 0xb2d6000c and (2) 0xb2d60034, which allows local users to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption, a different vulnerability than CVE-2008-1625.
Affected configurations
Node
avastavast_antivirus_homeRange≤4.8.1351windows
ORavastavast_antivirus_homeMatch4.7.827windows
ORavastavast_antivirus_homeMatch4.7.844windows
ORavastavast_antivirus_homeMatch4.7.869windows
ORavastavast_antivirus_homeMatch4.7.1043windows
ORavastavast_antivirus_homeMatch4.7.1098windows
ORavastavast_antivirus_homeMatch4.8.1169windows
ORavastavast_antivirus_homeMatch4.8.1195windows
ORavastavast_antivirus_homeMatch4.8.1201windows
ORavastavast_antivirus_homeMatch4.8.1227windows
ORavastavast_antivirus_homeMatch4.8.1229windows
ORavastavast_antivirus_homeMatch4.8.1282windows
ORavastavast_antivirus_homeMatch4.8.1290windows
ORavastavast_antivirus_homeMatch4.8.1296windows
ORavastavast_antivirus_homeMatch4.8.1335windows
ORavastavast_antivirus_professionalRange≤4.8.1351windows
ORavastavast_antivirus_professionalMatch4.7.827windows
ORavastavast_antivirus_professionalMatch4.7.844windows
ORavastavast_antivirus_professionalMatch4.7.1043windows
ORavastavast_antivirus_professionalMatch4.7.1098windows
ORavastavast_antivirus_professionalMatch4.8.1169windows
ORavastavast_antivirus_professionalMatch4.8.1195windows
ORavastavast_antivirus_professionalMatch4.8.1201windows
ORavastavast_antivirus_professionalMatch4.8.1227windows
ORavastavast_antivirus_professionalMatch4.8.1229windows
ORavastavast_antivirus_professionalMatch4.8.1282windows
ORavastavast_antivirus_professionalMatch4.8.1290windows
ORavastavast_antivirus_professionalMatch4.8.1296windows
ORavastavast_antivirus_professionalMatch4.8.1335windows
| Vendor | Product | Version | CPE |
|---|---|---|---|
| avast | avast_antivirus_home | * | cpe:2.3:a:avast:avast_antivirus_home:*:*:windows:*:*:*:*:* |
| avast | avast_antivirus_home | 4.7.827 | cpe:2.3:a:avast:avast_antivirus_home:4.7.827:*:windows:*:*:*:*:* |
| avast | avast_antivirus_home | 4.7.844 | cpe:2.3:a:avast:avast_antivirus_home:4.7.844:*:windows:*:*:*:*:* |
| avast | avast_antivirus_home | 4.7.869 | cpe:2.3:a:avast:avast_antivirus_home:4.7.869:*:windows:*:*:*:*:* |
| avast | avast_antivirus_home | 4.7.1043 | cpe:2.3:a:avast:avast_antivirus_home:4.7.1043:*:windows:*:*:*:*:* |
| avast | avast_antivirus_home | 4.7.1098 | cpe:2.3:a:avast:avast_antivirus_home:4.7.1098:*:windows:*:*:*:*:* |
| avast | avast_antivirus_home | 4.8.1169 | cpe:2.3:a:avast:avast_antivirus_home:4.8.1169:*:windows:*:*:*:*:* |
| avast | avast_antivirus_home | 4.8.1195 | cpe:2.3:a:avast:avast_antivirus_home:4.8.1195:*:windows:*:*:*:*:* |
| avast | avast_antivirus_home | 4.8.1201 | cpe:2.3:a:avast:avast_antivirus_home:4.8.1201:*:windows:*:*:*:*:* |
| avast | avast_antivirus_home | 4.8.1227 | cpe:2.3:a:avast:avast_antivirus_home:4.8.1227:*:windows:*:*:*:*:* |
Related
prion
prion
Memory corruption
2009-10-01 17:00:00
Input validation
2008-04-02 17:44:00
cvelist
cvelist
CVE-2009-3523
2009-10-01 16:00:00
CVE-2008-1625
2008-04-02 17:00:00
nvd
nvd
CVE-2009-3523
2009-10-01 17:00:00
CVE-2008-1625
2008-04-02 17:44:00
seebug
seebug
Avast! Antivirus aavmKer4.sys驱动本地权限提升漏洞
2009-11-05 00:00:00
avast! 4.7 aavmker4.sys privilege escalation
2010-04-28 00:00:00
exploitdb
exploitdb
Avast! 4.7 - 'aavmker4.sys' Local Privilege Escalation
2010-04-27 00:00:00
openvas
openvas
avast! Multiple Vulnerabilities (Oct 2009) - Windows
2009-10-08 00:00:00
avast! Multiple Vulnerabilities - Oct09 (Windows)
2009-10-08 00:00:00
nessus
nessus
avast! Professional Edition < 4.8.1356 Multiple Vulnerabilities
2009-10-27 00:00:00
packetstorm
packetstorm
Avast! 4.7 Privilege Escalation
2010-04-27 00:00:00
exploitpack
exploitpack
Avast! 4.7 - aavmker4.sys Local Privilege Escalation
2010-04-27 00:00:00
zdt
zdt
Avast! 4.7 aavmker4.sys privilege escalation
2010-04-27 00:00:00
cve
cve
CVE-2008-1625
2008-04-02 17:44:00
CVSS2
6.9
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
AI Score
6.3
Confidence
Low
EPSS
0
Percentile
5.1%
Related for CVE-2009-3523