SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

CVE

CVE-2008-1625

aavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to IOCTL 0xb2d60030, which allows local users to gain privileges via certain IOCTL requests.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 6.8
Exploit Score: 3.1
Impact Score: 10.0

CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: LOW
Authentication: SINGLE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE

Reference:

SECTRACK-1019732

http://www.securityfocus.com/archive/1/490321/100/0/threaded

BID-28502

SECUNIA-29605

ADV-2008-1034

avast-aavmker4-privilege-escalation(41527)

http://www.avast.com/eng/avast-4-home_pro-revision-history.html

http://www.trapkit.de/advisories/TKADV2008-002.txt


30430



423868



247862



909



194603



282