cbcvebase.
CVE-2016-4025
published 2016-11-03

CVE-2016-4025: Avast Internet Security v11.x.x, Pro Antivirus v11.x.x, Premier v11.x.x, Free Antivirus v11.x.x, Business Security v11.x.x, Endpoint Protection v8.x.x…

PriorityP423medium5.5CVSS 3.0
AVLACLPRLUINSUCNIHAN
EPSS
0.39%
31.0th percentile
Avast Internet Security v11.x.x, Pro Antivirus v11.x.x, Premier v11.x.x, Free Antivirus v11.x.x, Business Security v11.x.x, Endpoint Protection v8.x.x, Endpoint Protection Plus v8.x.x, Endpoint Protection Suite v8.x.x, Endpoint Protection Suite Plus v8.x.x, File Server Security v8.x.x, and Email Server Security v8.x.x allow attackers to bypass the DeepScreen feature via a DeviceIoControl call.

Affected

42 ranges· showing 25
VendorProductVersion rangeFixed in
avastbusiness_security——
avastbusiness_security——
avastbusiness_security——
avastbusiness_security——
avastbusiness_security——
avastbusiness_security——
avastemail_server_security<= 8.0.1609—
avastemail_server_security——
avastendpoint_protection<= 8.0.1609—
avastendpoint_protection——
avastendpoint_protection_plus——
avastendpoint_protection_plus——
avastendpoint_protection_suite<= 8.0.1609—
avastendpoint_protection_suite——
avastendpoint_protection_suite_plus<= 8.0.1609—
avastendpoint_protection_suite_plus——
avastfile_server_security<= 8.0.1609—
avastfile_server_security——
avastfree_antivirus——
avastfree_antivirus——
avastfree_antivirus——
avastfree_antivirus——
avastfree_antivirus——
avastfree_antivirus——
avastinternet_security——

CVSS provenance

nvdv3.05.5MEDIUMCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:N/I:P/A:N
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.