Vulnerability Details : CVE-2010-0705
Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly validate input to IOCTL 0xb2d60030, which allows local users to cause a denial of service (system crash) or execute arbitrary code to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption.
Vulnerability category: Memory CorruptionInput validationExecute codeDenial of service
Exploit prediction scoring system (EPSS) score for CVE-2010-0705
Probability of exploitation activity in the next 30 days: 0.04%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 6 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2010-0705
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
7.2
|
HIGH | AV:L/AC:L/Au:N/C:C/I:C/A:C |
3.9
|
10.0
|
NIST |
CWE ids for CVE-2010-0705
-
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.Assigned by: nvd@nist.gov (Primary)
References for CVE-2010-0705
-
http://www.vupen.com/english/advisories/2010/0449
Webmail | OVH- OVHVendor Advisory
-
http://www.securityfocus.com/archive/1/509710/100/0/threaded
SecurityFocus
-
http://www.securityfocus.com/bid/38363
Avast! Antivirus 'aavmKer4.sys' Driver IOCTL Handling Local Privilege Escalation Vulnerability
-
http://forum.avast.com/index.php?topic=55484.0
New avast program update 5.0.418Vendor Advisory
-
http://www.trapkit.de/advisories/TKADV2010-003.txt
-
http://www.securitytracker.com/id?1023644
avast! 'aavmker4.sys' IOCTL Processing Bug Lets Local Users Deny Service - SecurityTracker
Products affected by CVE-2010-0705
- cpe:2.3:a:avast:avast_antivirus_home:*:*:windows:*:*:*:*:*When used together with: Microsoft » Windows 2000When used together with: Microsoft » Windows Xp
- cpe:2.3:a:avast:avast_antivirus_home:4.8.1351:*:windows:*:*:*:*:*When used together with: Microsoft » Windows 2000When used together with: Microsoft » Windows Xp
- cpe:2.3:a:avast:avast_antivirus_home:4.8.1227:*:windows:*:*:*:*:*When used together with: Microsoft » Windows 2000When used together with: Microsoft » Windows Xp
- cpe:2.3:a:avast:avast_antivirus_home:4.8.1201:*:windows:*:*:*:*:*When used together with: Microsoft » Windows 2000When used together with: Microsoft » Windows Xp
- cpe:2.3:a:avast:avast_antivirus_home:4.8.1229:*:windows:*:*:*:*:*When used together with: Microsoft » Windows 2000When used together with: Microsoft » Windows Xp
- cpe:2.3:a:avast:avast_antivirus_home:4.8.1169:*:windows:*:*:*:*:*When used together with: Microsoft » Windows 2000When used together with: Microsoft » Windows Xp
- cpe:2.3:a:avast:avast_antivirus_home:4.8.1290:*:windows:*:*:*:*:*When used together with: Microsoft » Windows 2000When used together with: Microsoft » Windows Xp
- cpe:2.3:a:avast:avast_antivirus_home:4.8.1335:*:windows:*:*:*:*:*When used together with: Microsoft » Windows 2000When used together with: Microsoft » Windows Xp
- cpe:2.3:a:avast:avast_antivirus_home:4.8.1195:*:windows:*:*:*:*:*When used together with: Microsoft » Windows 2000When used together with: Microsoft » Windows Xp
- cpe:2.3:a:avast:avast_antivirus_home:4.8.1282:*:windows:*:*:*:*:*When used together with: Microsoft » Windows 2000When used together with: Microsoft » Windows Xp
- cpe:2.3:a:avast:avast_antivirus_home:4.8.1296:*:windows:*:*:*:*:*When used together with: Microsoft » Windows 2000When used together with: Microsoft » Windows Xp
- cpe:2.3:a:avast:avast_antivirus_home:4.8.1368.0:*:windows:*:*:*:*:*When used together with: Microsoft » Windows 2000When used together with: Microsoft » Windows Xp
- cpe:2.3:a:avast:avast_antivirus_professional:*:*:windows:*:*:*:*:*When used together with: Microsoft » Windows 2000When used together with: Microsoft » Windows Xp
- cpe:2.3:a:avast:avast_antivirus_professional:4.8.1351:*:windows:*:*:*:*:*When used together with: Microsoft » Windows 2000When used together with: Microsoft » Windows Xp
- cpe:2.3:a:avast:avast_antivirus_professional:4.8.1201:*:windows:*:*:*:*:*When used together with: Microsoft » Windows 2000When used together with: Microsoft » Windows Xp
- cpe:2.3:a:avast:avast_antivirus_professional:4.8.1227:*:windows:*:*:*:*:*When used together with: Microsoft » Windows 2000When used together with: Microsoft » Windows Xp
- cpe:2.3:a:avast:avast_antivirus_professional:4.8.1296:*:windows:*:*:*:*:*When used together with: Microsoft » Windows 2000When used together with: Microsoft » Windows Xp
- cpe:2.3:a:avast:avast_antivirus_professional:4.8.1169:*:windows:*:*:*:*:*When used together with: Microsoft » Windows 2000When used together with: Microsoft » Windows Xp
- cpe:2.3:a:avast:avast_antivirus_professional:4.8.1290:*:windows:*:*:*:*:*When used together with: Microsoft » Windows 2000When used together with: Microsoft » Windows Xp
- cpe:2.3:a:avast:avast_antivirus_professional:4.8.1335:*:windows:*:*:*:*:*When used together with: Microsoft » Windows 2000When used together with: Microsoft » Windows Xp
- cpe:2.3:a:avast:avast_antivirus_professional:4.8.1229:*:windows:*:*:*:*:*When used together with: Microsoft » Windows 2000When used together with: Microsoft » Windows Xp
- cpe:2.3:a:avast:avast_antivirus_professional:4.8.1282:*:windows:*:*:*:*:*When used together with: Microsoft » Windows 2000When used together with: Microsoft » Windows Xp
- cpe:2.3:a:avast:avast_antivirus_professional:4.8.1195:*:windows:*:*:*:*:*When used together with: Microsoft » Windows 2000When used together with: Microsoft » Windows Xp
- cpe:2.3:a:avast:avast_antivirus_professional:4.8.1356.0:*:*:*:*:*:*:*When used together with: Microsoft » Windows 2000When used together with: Microsoft » Windows Xp
- cpe:2.3:a:avast:avast_antivirus_professional:4.8.1368.0:*:windows:*:*:*:*:*When used together with: Microsoft » Windows 2000When used together with: Microsoft » Windows Xp