Lucene search

MitreCVE-2010-0705

HistoryFeb 25, 2010 - 6:30 p.m.

CVE-2010-0705

2010-02-2518:30:00

CWE-20

mitre

web.nvd.nist.gov

avast

aavmker4.sys

ioctl

local privilege escalation

cve-2010-0705

memory corruption

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

High

EPSS

Percentile

5.1%

JSON

Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly validate input to IOCTL 0xb2d60030, which allows local users to cause a denial of service (system crash) or execute arbitrary code to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption.

Affected configurations

Nvd

Node

avastavast_antivirus_homeRange≤5.0.396.0windows

avastavast_antivirus_homeMatch4.8.1169windows

avastavast_antivirus_homeMatch4.8.1195windows

avastavast_antivirus_homeMatch4.8.1201windows

avastavast_antivirus_homeMatch4.8.1227windows

avastavast_antivirus_homeMatch4.8.1229windows

avastavast_antivirus_homeMatch4.8.1282windows

avastavast_antivirus_homeMatch4.8.1290windows

avastavast_antivirus_homeMatch4.8.1296windows

avastavast_antivirus_homeMatch4.8.1335windows

avastavast_antivirus_homeMatch4.8.1351windows

avastavast_antivirus_homeMatch4.8.1368.0windows

avastavast_antivirus_professionalRange≤5.0.396.0windows

avastavast_antivirus_professionalMatch4.8.1169windows

avastavast_antivirus_professionalMatch4.8.1195windows

avastavast_antivirus_professionalMatch4.8.1201windows

avastavast_antivirus_professionalMatch4.8.1227windows

avastavast_antivirus_professionalMatch4.8.1229windows

avastavast_antivirus_professionalMatch4.8.1282windows

avastavast_antivirus_professionalMatch4.8.1290windows

avastavast_antivirus_professionalMatch4.8.1296windows

avastavast_antivirus_professionalMatch4.8.1335windows

avastavast_antivirus_professionalMatch4.8.1351windows

avastavast_antivirus_professionalMatch4.8.1356.0

avastavast_antivirus_professionalMatch4.8.1368.0windows

AND

microsoftwindows_2000

microsoftwindows_xp

VendorProductVersionCPE
avastavast_antivirus_home*cpe:2.3:a:avast:avast_antivirus_home:*:*:windows:*:*:*:*:*
avastavast_antivirus_home4.8.1169cpe:2.3:a:avast:avast_antivirus_home:4.8.1169:*:windows:*:*:*:*:*
avastavast_antivirus_home4.8.1195cpe:2.3:a:avast:avast_antivirus_home:4.8.1195:*:windows:*:*:*:*:*
avastavast_antivirus_home4.8.1201cpe:2.3:a:avast:avast_antivirus_home:4.8.1201:*:windows:*:*:*:*:*
avastavast_antivirus_home4.8.1227cpe:2.3:a:avast:avast_antivirus_home:4.8.1227:*:windows:*:*:*:*:*
avastavast_antivirus_home4.8.1229cpe:2.3:a:avast:avast_antivirus_home:4.8.1229:*:windows:*:*:*:*:*
avastavast_antivirus_home4.8.1282cpe:2.3:a:avast:avast_antivirus_home:4.8.1282:*:windows:*:*:*:*:*
avastavast_antivirus_home4.8.1290cpe:2.3:a:avast:avast_antivirus_home:4.8.1290:*:windows:*:*:*:*:*
avastavast_antivirus_home4.8.1296cpe:2.3:a:avast:avast_antivirus_home:4.8.1296:*:windows:*:*:*:*:*
avastavast_antivirus_home4.8.1335cpe:2.3:a:avast:avast_antivirus_home:4.8.1335:*:windows:*:*:*:*:*

Vendor	Product	Version	CPE
avast	avast_antivirus_home	*	cpe:2.3:a:avast:avast_antivirus_home:::windows:::::*
avast	avast_antivirus_home	4.8.1169	cpe:2.3:a:avast:avast_antivirus_home:4.8.1169::windows:::::
avast	avast_antivirus_home	4.8.1195	cpe:2.3:a:avast:avast_antivirus_home:4.8.1195::windows:::::
avast	avast_antivirus_home	4.8.1201	cpe:2.3:a:avast:avast_antivirus_home:4.8.1201::windows:::::
avast	avast_antivirus_home	4.8.1227	cpe:2.3:a:avast:avast_antivirus_home:4.8.1227::windows:::::
avast	avast_antivirus_home	4.8.1229	cpe:2.3:a:avast:avast_antivirus_home:4.8.1229::windows:::::
avast	avast_antivirus_home	4.8.1282	cpe:2.3:a:avast:avast_antivirus_home:4.8.1282::windows:::::
avast	avast_antivirus_home	4.8.1290	cpe:2.3:a:avast:avast_antivirus_home:4.8.1290::windows:::::
avast	avast_antivirus_home	4.8.1296	cpe:2.3:a:avast:avast_antivirus_home:4.8.1296::windows:::::
avast	avast_antivirus_home	4.8.1335	cpe:2.3:a:avast:avast_antivirus_home:4.8.1335::windows:::::