NetSight
medium5.5

CVE-2016-4025

Avast Internet Security v11.x.x, Pro Antivirus v11.x.x, Premier v11.x.x, Free Antivirus v11.x.x, Business Security v11.x.x, Endpoint Protection v8.x.x, Endpoin…

Impact

Avast Internet Security v11.x.x, Pro Antivirus v11.x.x, Premier v11.x.x, Free Antivirus v11.x.x, Business Security v11.x.x, Endpoint Protection v8.x.x, Endpoint Protection Plus v8.x.x, Endpoint Protection Suite v8.x.x, Endpoint Protection Suite Plus v8.x.x, File Server Security v8.x.x, and Email Server Security v8.x.x allow attackers to bypass the DeepScreen feature via a DeviceIoControl call.

Affected products

VendorProductAffected versions
AvastBusiness Security
Versions 11.1.2241, 11.1.2245, 11.1.2253, 11.1.2260, 11.1.2261, 11.1.2262
AvastFree Antivirus
Versions 11.1.2241, 11.1.2245, 11.1.2253, 11.1.2260, 11.1.2261, 11.1.2262
AvastInternet Security
Versions 11.1.2241, 11.1.2245, 11.1.2253, 11.1.2260, 11.1.2261, 11.1.2262
AvastPremier
Versions 11.1.2241, 11.1.2245, 11.1.2253, 11.1.2260, 11.1.2261, 11.1.2262
AvastPro Antivirus
Versions 11.1.2241, 11.1.2245, 11.1.2253, 11.1.2260, 11.1.2261, 11.1.2262
AvastEmail Server Security
through 8.0.1609
Version 8.0.1606
AvastEndpoint Protection
through 8.0.1609
Version 8.0.1606
AvastEndpoint Protection Plus
Versions 8.0.1606, 8.0.1609
AvastEndpoint Protection Suite
through 8.0.1609
Version 8.0.1606
AvastEndpoint Protection Suite Plus
through 8.0.1609
Version 8.0.1606
AvastFile Server Security
through 8.0.1609
Version 8.0.1606

Weakness classification

References