Test ID:	1.3.6.1.4.1.25623.1.0.808057
Category:	General
Title:	Avast Pro Heap-Based Buffer Overflow Vulnerability
Summary:	Avast Pro is prone to heap-based buffer overflow vulnerability.
Description:	Summary: Avast Pro is prone to heap-based buffer overflow vulnerability. Vulnerability Insight: The flaw exists in avast virtualization driver (aswSnx.sys) that handles 'Sandbox' and 'DeepScreen' functionality improperly. Vulnerability Impact: Successful exploitation will allow attacker to elevate privileges from any account type and execute code as SYSTEM. Affected Software/OS: Avast Pro version before 11.1.2253. Solution: Upgrade to Avast Pro version 11.1.2253 or later. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-8620 http://seclists.org/fulldisclosure/2016/Feb/94 http://packetstormsecurity.com/files/135859/Avast-11.1.2245-Heap-Overflow.html https://www.nettitude.co.uk/exploiting-a-kernel-paged-pool-buffer-overflow-in-avast-virtualization-driver/ http://www.securitytracker.com/id/1035093
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.