CVE-2010-0705
Avast! 4.7 - 'aavmker4.sys' Local Privilege Escalation
Severity Score
7.2
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly validate input to IOCTL 0xb2d60030, which allows local users to cause a denial of service (system crash) or execute arbitrary code to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption.
Aavmker4.sys en avast! desde v4.8 hasta v4.8.1368.0 y v5.0 anteriores a v5.0.418.0 corriendo sobre Windows 2000 o XP, no valida adecuadamente una entrada a IOCTL 0xb2d60030, lo que permite a usuarios locales producir una denegación de servicio (caída del sistema) o ejecutar código arbitrario para ganar privilegios a través de peticiones IOCTL utilizando direcciones de kernel manipuladas que inician una corrupción de memoria.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2010-02-25 CVE Reserved
- 2010-02-25 CVE Published
- 2010-04-27 First Exploit
- 2023-03-08 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-20: Improper Input Validation
CAPEC
References (10)
| URL | Tag | Source |
|---|---|---|
| http://osvdb.org/62510 | Vdb Entry | |
| http://www.securityfocus.com/archive/1/509710/100/0/threaded | Mailing List | |
| http://www.securityfocus.com/bid/38363 | Vdb Entry | |
| http://www.securitytracker.com/id?1023644 | Vdb Entry | |
| http://www.trapkit.de/advisories/TKADV2010-003.txt | X_refsource_misc |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/12406 | 2010-04-27 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://forum.avast.com/index.php?topic=55484.0 | 2018-10-10 | |
| http://secunia.com/advisories/38677 | 2018-10-10 | |
| http://secunia.com/advisories/38689 | 2018-10-10 | |
| http://www.vupen.com/english/advisories/2010/0449 | 2018-10-10 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Avast Search vendor "Avast" | Avast Antivirus Home Search vendor "Avast" for product "Avast Antivirus Home" | <= 5.0.396.0 Search vendor "Avast" for product "Avast Antivirus Home" and version " <= 5.0.396.0" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Home Search vendor "Avast" for product "Avast Antivirus Home" | <= 5.0.396.0 Search vendor "Avast" for product "Avast Antivirus Home" and version " <= 5.0.396.0" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Home Search vendor "Avast" for product "Avast Antivirus Home" | 4.8.1169 Search vendor "Avast" for product "Avast Antivirus Home" and version "4.8.1169" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Home Search vendor "Avast" for product "Avast Antivirus Home" | 4.8.1169 Search vendor "Avast" for product "Avast Antivirus Home" and version "4.8.1169" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Home Search vendor "Avast" for product "Avast Antivirus Home" | 4.8.1195 Search vendor "Avast" for product "Avast Antivirus Home" and version "4.8.1195" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Home Search vendor "Avast" for product "Avast Antivirus Home" | 4.8.1195 Search vendor "Avast" for product "Avast Antivirus Home" and version "4.8.1195" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Home Search vendor "Avast" for product "Avast Antivirus Home" | 4.8.1201 Search vendor "Avast" for product "Avast Antivirus Home" and version "4.8.1201" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Home Search vendor "Avast" for product "Avast Antivirus Home" | 4.8.1201 Search vendor "Avast" for product "Avast Antivirus Home" and version "4.8.1201" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Home Search vendor "Avast" for product "Avast Antivirus Home" | 4.8.1227 Search vendor "Avast" for product "Avast Antivirus Home" and version "4.8.1227" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Home Search vendor "Avast" for product "Avast Antivirus Home" | 4.8.1227 Search vendor "Avast" for product "Avast Antivirus Home" and version "4.8.1227" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Home Search vendor "Avast" for product "Avast Antivirus Home" | 4.8.1229 Search vendor "Avast" for product "Avast Antivirus Home" and version "4.8.1229" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Home Search vendor "Avast" for product "Avast Antivirus Home" | 4.8.1229 Search vendor "Avast" for product "Avast Antivirus Home" and version "4.8.1229" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Home Search vendor "Avast" for product "Avast Antivirus Home" | 4.8.1282 Search vendor "Avast" for product "Avast Antivirus Home" and version "4.8.1282" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Home Search vendor "Avast" for product "Avast Antivirus Home" | 4.8.1282 Search vendor "Avast" for product "Avast Antivirus Home" and version "4.8.1282" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Home Search vendor "Avast" for product "Avast Antivirus Home" | 4.8.1290 Search vendor "Avast" for product "Avast Antivirus Home" and version "4.8.1290" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Home Search vendor "Avast" for product "Avast Antivirus Home" | 4.8.1290 Search vendor "Avast" for product "Avast Antivirus Home" and version "4.8.1290" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Home Search vendor "Avast" for product "Avast Antivirus Home" | 4.8.1296 Search vendor "Avast" for product "Avast Antivirus Home" and version "4.8.1296" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Home Search vendor "Avast" for product "Avast Antivirus Home" | 4.8.1296 Search vendor "Avast" for product "Avast Antivirus Home" and version "4.8.1296" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Home Search vendor "Avast" for product "Avast Antivirus Home" | 4.8.1335 Search vendor "Avast" for product "Avast Antivirus Home" and version "4.8.1335" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Home Search vendor "Avast" for product "Avast Antivirus Home" | 4.8.1335 Search vendor "Avast" for product "Avast Antivirus Home" and version "4.8.1335" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Home Search vendor "Avast" for product "Avast Antivirus Home" | 4.8.1351 Search vendor "Avast" for product "Avast Antivirus Home" and version "4.8.1351" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Home Search vendor "Avast" for product "Avast Antivirus Home" | 4.8.1351 Search vendor "Avast" for product "Avast Antivirus Home" and version "4.8.1351" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Home Search vendor "Avast" for product "Avast Antivirus Home" | 4.8.1368.0 Search vendor "Avast" for product "Avast Antivirus Home" and version "4.8.1368.0" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Home Search vendor "Avast" for product "Avast Antivirus Home" | 4.8.1368.0 Search vendor "Avast" for product "Avast Antivirus Home" and version "4.8.1368.0" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Professional Search vendor "Avast" for product "Avast Antivirus Professional" | <= 5.0.396.0 Search vendor "Avast" for product "Avast Antivirus Professional" and version " <= 5.0.396.0" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Professional Search vendor "Avast" for product "Avast Antivirus Professional" | <= 5.0.396.0 Search vendor "Avast" for product "Avast Antivirus Professional" and version " <= 5.0.396.0" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Professional Search vendor "Avast" for product "Avast Antivirus Professional" | 4.8.1169 Search vendor "Avast" for product "Avast Antivirus Professional" and version "4.8.1169" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Professional Search vendor "Avast" for product "Avast Antivirus Professional" | 4.8.1169 Search vendor "Avast" for product "Avast Antivirus Professional" and version "4.8.1169" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Professional Search vendor "Avast" for product "Avast Antivirus Professional" | 4.8.1195 Search vendor "Avast" for product "Avast Antivirus Professional" and version "4.8.1195" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Professional Search vendor "Avast" for product "Avast Antivirus Professional" | 4.8.1195 Search vendor "Avast" for product "Avast Antivirus Professional" and version "4.8.1195" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Professional Search vendor "Avast" for product "Avast Antivirus Professional" | 4.8.1201 Search vendor "Avast" for product "Avast Antivirus Professional" and version "4.8.1201" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Professional Search vendor "Avast" for product "Avast Antivirus Professional" | 4.8.1201 Search vendor "Avast" for product "Avast Antivirus Professional" and version "4.8.1201" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Professional Search vendor "Avast" for product "Avast Antivirus Professional" | 4.8.1227 Search vendor "Avast" for product "Avast Antivirus Professional" and version "4.8.1227" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Professional Search vendor "Avast" for product "Avast Antivirus Professional" | 4.8.1227 Search vendor "Avast" for product "Avast Antivirus Professional" and version "4.8.1227" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Professional Search vendor "Avast" for product "Avast Antivirus Professional" | 4.8.1229 Search vendor "Avast" for product "Avast Antivirus Professional" and version "4.8.1229" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Professional Search vendor "Avast" for product "Avast Antivirus Professional" | 4.8.1229 Search vendor "Avast" for product "Avast Antivirus Professional" and version "4.8.1229" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Professional Search vendor "Avast" for product "Avast Antivirus Professional" | 4.8.1282 Search vendor "Avast" for product "Avast Antivirus Professional" and version "4.8.1282" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Professional Search vendor "Avast" for product "Avast Antivirus Professional" | 4.8.1282 Search vendor "Avast" for product "Avast Antivirus Professional" and version "4.8.1282" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Professional Search vendor "Avast" for product "Avast Antivirus Professional" | 4.8.1290 Search vendor "Avast" for product "Avast Antivirus Professional" and version "4.8.1290" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Professional Search vendor "Avast" for product "Avast Antivirus Professional" | 4.8.1290 Search vendor "Avast" for product "Avast Antivirus Professional" and version "4.8.1290" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Professional Search vendor "Avast" for product "Avast Antivirus Professional" | 4.8.1296 Search vendor "Avast" for product "Avast Antivirus Professional" and version "4.8.1296" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Professional Search vendor "Avast" for product "Avast Antivirus Professional" | 4.8.1296 Search vendor "Avast" for product "Avast Antivirus Professional" and version "4.8.1296" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Professional Search vendor "Avast" for product "Avast Antivirus Professional" | 4.8.1335 Search vendor "Avast" for product "Avast Antivirus Professional" and version "4.8.1335" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Professional Search vendor "Avast" for product "Avast Antivirus Professional" | 4.8.1335 Search vendor "Avast" for product "Avast Antivirus Professional" and version "4.8.1335" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Professional Search vendor "Avast" for product "Avast Antivirus Professional" | 4.8.1351 Search vendor "Avast" for product "Avast Antivirus Professional" and version "4.8.1351" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Professional Search vendor "Avast" for product "Avast Antivirus Professional" | 4.8.1351 Search vendor "Avast" for product "Avast Antivirus Professional" and version "4.8.1351" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Professional Search vendor "Avast" for product "Avast Antivirus Professional" | 4.8.1356.0 Search vendor "Avast" for product "Avast Antivirus Professional" and version "4.8.1356.0" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Professional Search vendor "Avast" for product "Avast Antivirus Professional" | 4.8.1356.0 Search vendor "Avast" for product "Avast Antivirus Professional" and version "4.8.1356.0" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Professional Search vendor "Avast" for product "Avast Antivirus Professional" | 4.8.1368.0 Search vendor "Avast" for product "Avast Antivirus Professional" and version "4.8.1368.0" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | * | - |
Safe
|
| Avast Search vendor "Avast" | Avast Antivirus Professional Search vendor "Avast" for product "Avast Antivirus Professional" | 4.8.1368.0 Search vendor "Avast" for product "Avast Antivirus Professional" and version "4.8.1368.0" | windows |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | - |
Safe
|