CVE-2008-1625

Description

aavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to IOCTL 0xb2d60030, which allows local users to gain privileges via certain IOCTL requests.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/41527

http://www.vupen.com/english/advisories/2008/1034/references

http://www.trapkit.de/advisories/TKADV2008-002.txt

http://www.securitytracker.com/id?1019732

http://www.securityfocus.com/bid/28502

http://www.securityfocus.com/archive/1/490321/100/0/threaded

http://www.avast.com/eng/avast-4-home_pro-revision-history.html

http://secunia.com/advisories/29605

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS