CVE-2009-4049

EUVD-2009-4020
Heap-based buffer overflow in aswRdr.sys (aka the TDI RDR driver) in avast! Home and Professional 4.8.1356.0 allows local users to cause a denial of service (memory corruption) or possibly gain privileges via crafted arguments to IOCTL 0x80002024.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.2 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 60%
Affected Products (NVD)
VendorProductVersion
avastavast_antivirus_home
4.8.1356.0
avastavast_antivirus_professional
4.8.1356.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/37368
http://www.efblog.net/2009/11/avast-aswrdrsys-kernel-pool-corruption.html
http://www.securityfocus.com/archive/1/507891/100/0/threaded
http://www.securityfocus.com/bid/37031
http://www.vupen.com/english/advisories/2009/3266
https://www.evilfingers.com/advisory/Advisory/Avast_aswRdr_sys_Kernel_Pool_Corruption_and_Local_Privilege_Escalation.php
http://secunia.com/advisories/37368
http://www.efblog.net/2009/11/avast-aswrdrsys-kernel-pool-corruption.html
http://www.securityfocus.com/archive/1/507891/100/0/threaded
http://www.securityfocus.com/bid/37031
http://www.vupen.com/english/advisories/2009/3266
https://www.evilfingers.com/advisory/Advisory/Avast_aswRdr_sys_Kernel_Pool_Corruption_and_Local_Privilege_Escalation.php