6.8

CVE-2008-1625

aavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to IOCTL 0xb2d60030, which allows local users to gain privileges via certain IOCTL requests.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Avast ≫ Avast Antivirus Home Version 4.7.827 Edition windows
Avast ≫ Avast Antivirus Home Version 4.7.844 Edition windows
Avast ≫ Avast Antivirus Home Version 4.7.869 Edition windows
Avast ≫ Avast Antivirus Home Version 4.7.1043 Edition windows
Avast ≫ Avast Antivirus Home Version 4.7.1098 Edition windows
Avast ≫ Avast Antivirus Professional Version 4.7.827 Edition windows
Avast ≫ Avast Antivirus Professional Version 4.7.844 Edition windows
Avast ≫ Avast Antivirus Professional Version 4.7.1043 Edition windows
Avast ≫ Avast Antivirus Professional Version 4.7.1098 Edition windows
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.71% 0.486
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 3.1 10
AV:L/AC:L/Au:S/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.avast.com/eng/avast-4-home_pro-revision-history.html
http://secunia.com/advisories/29605
Vendor Advisory
http://www.securityfocus.com/archive/1/490321/100/0/threaded
http://www.securityfocus.com/bid/28502
http://www.securitytracker.com/id?1019732
http://www.trapkit.de/advisories/TKADV2008-002.txt
http://www.vupen.com/english/advisories/2008/1034/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41527