| Vulnerability Name: | CVE-2008-1625 (CCN-41527) | ||||||||
| Assigned: | 2008-03-30 | ||||||||
| Published: | 2008-03-30 | ||||||||
| Updated: | 2018-10-11 | ||||||||
| Summary: | aavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to IOCTL 0xb2d60030, which allows local users to gain privileges via certain IOCTL requests. | ||||||||
| CVSS v3 Severity: | 9.3 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
| ||||||||
| CVSS v2 Severity: | 6.8 Medium (CVSS v2 Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C) 5.6 Medium (Temporal CVSS v2 Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C/E:F/RL:OF/RC:C)
5.9 Medium (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C/E:F/RL:OF/RC:C)
| ||||||||
| Vulnerability Type: | CWE-264 | ||||||||
| Vulnerability Consequences: | Gain Privileges | ||||||||
| References: | Source: MITRE Type: CNA CVE-2008-1625 Source: CCN Type: SA29605 avast! Home/Professional aavmker4.sys Privilege Escalation Source: SECUNIA Type: Vendor Advisory 29605 Source: CCN Type: SECTRACK ID: 1019732 avast! 'aavmker4.sys' Kernel Driver Lets Local Users Gain Elevated Privileges Source: CCN Type: avast! Changelog, Version 4.8.1169, March 29, 2008 avast! 4 Home/Professional Revision History Source: CONFIRM Type: UNKNOWN http://www.avast.com/eng/avast-4-home_pro-revision-history.html Source: CCN Type: avast! Web site Download Programs Source: CCN Type: OSVDB ID: 43922 avast! Home/Professional aavmker4.sys IOCTL Handling Local Privilege Escalation Source: CCN Type: OSVDB ID: 58493 avast! Home / Professional aavmKer4.sys IOCTL Handling Memory Corruption Local Privilege Escalation Source: BUGTRAQ Type: UNKNOWN 20080330 [TKADV2008-002] avast! 4.7 aavmker4.sys Kernel Memory Corruption Source: BID Type: UNKNOWN 28502 Source: CCN Type: BID-28502 Avast! Home/Professional Local Privilege Escalation Vulnerability Source: SECTRACK Type: UNKNOWN 1019732 Source: CCN Type: Trapkit Security Advisory TKADV2008-002 avast! 4.7 aavmker4.sys Kernel Memory Corruption Source: MISC Type: UNKNOWN http://www.trapkit.de/advisories/TKADV2008-002.txt Source: VUPEN Type: UNKNOWN ADV-2008-1034 Source: XF Type: UNKNOWN avast-aavmker4-privilege-escalation(41527) Source: XF Type: UNKNOWN avast-aavmker4-privilege-escalation(41527) Source: EXPLOIT-DB Type: EXPLOIT Offensive Security Exploit Database [04-27-2010] | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration 2:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||