Avira AntiVir Premium, Premium Security Suite, AntiVir Professional, and AntiVir Personal - FREE allows local users to execute arbitrary code via a crafted IOCTL request that overwrites a kernel pointer.
https://exchange.xforce.ibmcloud.com/vulnerabilities/46567
http://www.vupen.com/english/advisories/2008/3130
http://www.vupen.com/english/VUPEN-Security-Advisory-20081112.txt