6 results (0.002 seconds)

CVSS: 7.8EPSS: 0%CPEs: 27EXPL: 1

CVE-2010-0705 – Avast! 4.7 - 'aavmker4.sys' Local Privilege Escalation

https://notcve.org/view.php?id=CVE-2010-0705

25 Feb 2010 — Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly validate input to IOCTL 0xb2d60030, which allows local users to cause a denial of service (system crash) or execute arbitrary code to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption. Aavmker4.sys en avast! desde v4.8 hasta v4.8.1368.0 y v5.0 anteriores a v5.0.418.0 corriendo sobre Windows 2000 o XP, no valida adecuadamente una entrada a IOCT... • https://www.exploit-db.com/exploits/12406 • CWE-20: Improper Input Validation •

CVSS: 7.8EPSS: 0%CPEs: 29EXPL: 2

CVE-2009-3523 – Avast! 4.7 - 'aavmker4.sys' Local Privilege Escalation

https://notcve.org/view.php?id=CVE-2009-3523

01 Oct 2009 — aavmKer4.sys in avast! Home and Professional for Windows before 4.8.1356 does not properly validate input to IOCTLs (1) 0xb2d6000c and (2) 0xb2d60034, which allows local users to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption, a different vulnerability than CVE-2008-1625. aavmKer4.sys en avast! Home y Professional para Windows anterior v4.8.1356 no proporciona entradas validad en IOCTLs (1) 0xb2d6000c y (2) 0xb2d60034, que permite a usuarios locales obtener ... • https://www.exploit-db.com/exploits/12406 • CWE-20: Improper Input Validation •

CVSS: 8.4EPSS: 0%CPEs: 29EXPL: 0

CVE-2009-3524

https://notcve.org/view.php?id=CVE-2009-3524

01 Oct 2009 — Unspecified vulnerability in ashWsFtr.dll in avast! Home and Professional for Windows before 4.8.1356 has unknown impact and local attack vectors. Vulnerabilidad inesperada en ashWsFtr.dll en avast! Home y Professional para Windows anterior v4.8.1356 tiene un impacto y vectores de ataque no especificados. • http://osvdb.org/58403 •

CVSS: 7.8EPSS: 0%CPEs: 9EXPL: 1

CVE-2008-1625 – Avast! 4.7 - 'aavmker4.sys' Local Privilege Escalation

https://notcve.org/view.php?id=CVE-2008-1625

02 Apr 2008 — aavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to IOCTL 0xb2d60030, which allows local users to gain privileges via certain IOCTL requests. aavmker4.sys en avast! Home y Professional 4.7 para Windows, no valida de forma correcta la entrada a IOCTL 0xb2d60030, esto permite a usuarios locales obtener privilegios a través de cierta solicitud IOCTL. • https://www.exploit-db.com/exploits/12406 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 9.8EPSS: 0%CPEs: 19EXPL: 1

CVE-2007-6265

https://notcve.org/view.php?id=CVE-2007-6265

07 Dec 2007 — Unspecified vulnerability in avast! 4 Home and Professional Editions before 4.7.1098 allows remote attackers to have an unknown impact via a crafted TAR archive. Vulnerabilidad no especificada en avast! 4, ediciones Home y Professional, en versiones anteriores a la 4.7.1098. Permite que atacantes remotos provoquen un impacto desconocido usando un archivo TAR manipulado. • http://secunia.com/advisories/27929 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.8EPSS: 1%CPEs: 59EXPL: 1

CVE-2007-1673

https://notcve.org/view.php?id=CVE-2007-1673

09 May 2007 — unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file. El archivo unzoo.c, tal como se utiliza en varios productos, incluyendo AMaViS versión 2.4.1 y anteriores, permite a los atacantes remotos causar una denegación de servicio (bucle infinito) por medio de un archivo ZOO con una estructura direntry que apunta hacia un archivo anterior. • http://osvdb.org/36208 • CWE-399: Resource Management Errors •