6.8

CVE-2008-1625

aavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to IOCTL 0xb2d60030, which allows local users to gain privileges via certain IOCTL requests.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Avast ≫ Avast Antivirus Home Version4.7.827 Editionwindows
Avast ≫ Avast Antivirus Home Version4.7.844 Editionwindows
Avast ≫ Avast Antivirus Home Version4.7.869 Editionwindows
Avast ≫ Avast Antivirus Home Version4.7.1043 Editionwindows
Avast ≫ Avast Antivirus Home Version4.7.1098 Editionwindows
Avast ≫ Avast Antivirus Professional Version4.7.827 Editionwindows
Avast ≫ Avast Antivirus Professional Version4.7.844 Editionwindows
Avast ≫ Avast Antivirus Professional Version4.7.1043 Editionwindows
Avast ≫ Avast Antivirus Professional Version4.7.1098 Editionwindows
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.71% 0.486
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 3.1 10
AV:L/AC:L/Au:S/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.avast.com/eng/avast-4-home_pro-revision-history.html
http://secunia.com/advisories/29605
Vendor Advisory
http://www.securityfocus.com/archive/1/490321/100/0/threaded
http://www.securityfocus.com/bid/28502
http://www.securitytracker.com/id?1019732
http://www.trapkit.de/advisories/TKADV2008-002.txt
http://www.vupen.com/english/advisories/2008/1034/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41527