Test Kennung:	1.3.6.1.4.1.25623.1.0.801111
Kategorie:	Buffer overflow
Titel:	avast! Multiple Vulnerabilities (Oct 2009) - Windows
Zusammenfassung:	avast! AntiVirus is prone to multiple vulnerabilities.
Beschreibung:	Summary: avast! AntiVirus is prone to multiple vulnerabilities. Vulnerability Insight: - A boundary error exists in the 'aswMon2' kernel driver when processing IOCTLs. This can be exploited to cause a stack-based buffer overflow via a specially crafted 0xB2C80018 IOCTL. - An error in the 'AavmKer4.sys' kernel driver that can be exploited to corrupt memory via a specially crafted 0xB2D6000C or 0xB2D60034 IOCTL. - An unspecified error exists in the ashWsFtr.dll library which can be exploited to cause unknown impact. Vulnerability Impact: Successful exploitation will let the local attackers to cause a Denial of Service or gain escalated privileges on the victim's system. Affected Software/OS: avast! Home and Professional version prior to 4.8.1356 on Windows. Solution: Upgrade to avast! version 4.8.1356 or later. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3522 BugTraq ID: 36507 http://www.securityfocus.com/bid/36507 Bugtraq: 20090923 Avast aswMon2.sys kernel memory corruption and Local Privilege Escalation. (Google Search) http://www.securityfocus.com/archive/1/506681/100/0/threaded https://www.evilfingers.com/advisory/Advisory/Avast_aswMon2.sys_kernel_memory_corruption_and_Local_Privilege_Escalation.php http://osvdb.org/58402 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6226 http://www.securitytracker.com/id?1022940 http://secunia.com/advisories/36858 http://www.vupen.com/english/advisories/2009/2761 XForce ISS Database: avast-aswmon2-bo(53456) https://exchange.xforce.ibmcloud.com/vulnerabilities/53456 Common Vulnerability Exposure (CVE) ID: CVE-2009-3523 http://www.ntinternals.org/ntiadv0904/ntiadv0904.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6024 Common Vulnerability Exposure (CVE) ID: CVE-2009-3524 http://osvdb.org/58403 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6509
Copyright	Copyright (C) 2009 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.