CVE-2009-4049
published 2009-11-23CVE-2009-4049: Heap-based buffer overflow in aswRdr.sys (aka the TDI RDR driver) in avast! Home and Professional 4.8.1356.0 allows local users to cause a denial of service…
PriorityP432high7.2CVSS 2.0
AVLACLAuNCCICAC
EXPLOIT
EPSS
1.10%
61.4th percentile
Heap-based buffer overflow in aswRdr.sys (aka the TDI RDR driver) in avast! Home and Professional 4.8.1356.0 allows local users to cause a denial of service (memory corruption) or possibly gain privileges via crafted arguments to IOCTL 0x80002024.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| avast | avast_antivirus_home | — | — |
| avast | avast_antivirus_professional | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://secunia.com/advisories/37368http://www.efblog.net/2009/11/avast-aswrdrsys-kernel-pool-corruption.htmlhttp://www.securityfocus.com/archive/1/507891/100/0/threadedhttp://www.securityfocus.com/bid/37031http://www.vupen.com/english/advisories/2009/3266https://www.evilfingers.com/advisory/Advisory/Avast_aswRdr_sys_Kernel_Pool_Corruption_and_Local_Privilege_Escalation.phphttp://secunia.com/advisories/37368http://www.efblog.net/2009/11/avast-aswrdrsys-kernel-pool-corruption.htmlhttp://www.securityfocus.com/archive/1/507891/100/0/threadedhttp://www.securityfocus.com/bid/37031http://www.vupen.com/english/advisories/2009/3266https://www.evilfingers.com/advisory/Advisory/Avast_aswRdr_sys_Kernel_Pool_Corruption_and_Local_Privilege_Escalation.php
2009-11-23
Published