cbcvebase.
CVE-2010-0705
published 2010-02-25

CVE-2010-0705: Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly validate input to IOCTL 0xb2d60030…

PriorityP337high7.2CVSS 2.0
AVLACLAuNCCICAC
EXPLOIT
EPSS
0.93%
56.1th percentile
Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly validate input to IOCTL 0xb2d60030, which allows local users to cause a denial of service (system crash) or execute arbitrary code to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption.

Affected

25 ranges
VendorProductVersion rangeFixed in
avastavast_antivirus_home<= 5.0.396.0—
avastavast_antivirus_home——
avastavast_antivirus_home——
avastavast_antivirus_home——
avastavast_antivirus_home——
avastavast_antivirus_home——
avastavast_antivirus_home——
avastavast_antivirus_home——
avastavast_antivirus_home——
avastavast_antivirus_home——
avastavast_antivirus_home——
avastavast_antivirus_home——
avastavast_antivirus_professional<= 5.0.396.0—
avastavast_antivirus_professional——
avastavast_antivirus_professional——
avastavast_antivirus_professional——
avastavast_antivirus_professional——
avastavast_antivirus_professional——
avastavast_antivirus_professional——
avastavast_antivirus_professional——
avastavast_antivirus_professional——
avastavast_antivirus_professional——
avastavast_antivirus_professional——
avastavast_antivirus_professional——
avastavast_antivirus_professional——
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.