CVE-2009-3522

2009-10-0117:00:00

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.9

Confidence

High

EPSS

Percentile

10.3%

JSON

Stack-based buffer overflow in aswMon2.sys in avast! Home and Professional for Windows 4.8.1351, and possibly other versions before 4.8.1356, allows local users to cause a denial of service (system crash) and possibly gain privileges via a crafted IOCTL request to IOCTL 0xb2c80018.

Affected configurations

Nvd

Node

avastavast_antivirus_homeMatch4.8.1351windows

avastavast_antivirus_professionalMatch4.8.1351windows

VendorProductVersionCPE
avastavast_antivirus_home4.8.1351cpe:2.3:a:avast:avast_antivirus_home:4.8.1351:*:windows:*:*:*:*:*
avastavast_antivirus_professional4.8.1351cpe:2.3:a:avast:avast_antivirus_professional:4.8.1351:*:windows:*:*:*:*:*

Vendor	Product	Version	CPE
avast	avast_antivirus_home	4.8.1351	cpe:2.3:a:avast:avast_antivirus_home:4.8.1351::windows:::::
avast	avast_antivirus_professional	4.8.1351	cpe:2.3:a:avast:avast_antivirus_professional:4.8.1351::windows:::::