EDB-12406

functional

Avast! 4.7 - 'aavmker4.sys' Local Privilege Escalation

view exploit source exploit_dbverifiedtype localauthor ryujinpublished 2010-04-27catalog exploit_db

exploited CVEs (3)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2010-0705US	high7.2	0.93% (60th)	Exploit	2010-02-25
Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly validate input to IOCTL 0xb2d60030, which allows local users…
CVE-2009-3523US	medium6.9	0.78% (56th)	Exploit	2009-10-01
aavmKer4.sys in avast! Home and Professional for Windows before 4.8.1356 does not properly validate input to IOCTLs (1) 0xb2d6000c and (2) 0xb2d60034, which allows local users to g…
CVE-2008-1625US	medium6.8	0.71% (53rd)	Exploit	2008-04-02
aavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to IOCTL 0xb2d60030, which allows local users to gain privileges via certain IOCTL req…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.