high7.2Public exploit code
CVE-2009-4049
Heap-based buffer overflow in aswRdr.sys (aka the TDI RDR driver) in avast!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Avast! AntiVirus 4.8.1356 - 'aswRdr.sys' Driver Privilege Escalation2009-11-16 · local · windows · Verified
Impact
Heap-based buffer overflow in aswRdr.sys (aka the TDI RDR driver) in avast! Home and Professional 4.8.1356.0 allows local users to cause a denial of service (memory corruption) or possibly gain privileges via crafted arguments to IOCTL 0x80002024.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Avast | Avast Antivirus Home | Version 4.8.1356.0 |
| Avast | Avast Antivirus Professional | Version 4.8.1356.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/37368
- http://www.efblog.net/2009/11/avast-aswrdrsys-kernel-pool-corruption.html
- http://www.securityfocus.com/archive/1/507891/100/0/threaded
- http://www.securityfocus.com/bid/37031
- http://www.vupen.com/english/advisories/2009/3266
- https://www.evilfingers.com/advisory/Advisory/Avast_aswRdr_sys_Kernel_Pool_Corruption_and_Local_Privilege_Escalation.php
- http://secunia.com/advisories/37368
- http://www.efblog.net/2009/11/avast-aswrdrsys-kernel-pool-corruption.html
- http://www.securityfocus.com/archive/1/507891/100/0/threaded
- http://www.securityfocus.com/bid/37031
- http://www.vupen.com/english/advisories/2009/3266
- https://www.evilfingers.com/advisory/Advisory/Avast_aswRdr_sys_Kernel_Pool_Corruption_and_Local_Privilege_Escalation.php