CVE-2009-3524: High severity avast pro antivirus vulnerability
Published Oct 1, 2009
·Updated
Unspecified vulnerability in ashWsFtr.dll in avast! Home and Professional for Windows before 4.8.1356 has unknown impact and local attack vectors.
Affected Software
29 affected components
Avast Avast Antivirus Professional=4.8.1169
Avast Avast Antivirus Home=4.7.1098
Avast Avast Antivirus Professional=4.7.827
Avast Avast Antivirus Professional=4.8.1201
Avast Avast Antivirus Home=4.8.1229
Avast Avast Antivirus Professional=4.8.1229
Avast Avast Antivirus Professional=4.8.1296
Avast Avast Antivirus Professional=4.8.1335
Avast Avast Antivirus Professional=4.7.1043
Avast Avast Antivirus Home=4.8.1335
Avast Avast Antivirus Professional=4.8.1195
Avast Avast Antivirus Home<=4.8.1351
Avast Avast Antivirus Home=4.8.1201
Avast Avast Antivirus Home=4.8.1282
Avast Avast Antivirus Professional=4.8.1282
Avast Avast Antivirus Home=4.8.1296
Avast Avast Antivirus Professional<=4.8.1351
Avast Avast Antivirus Professional=4.8.1290
Avast Avast Antivirus Professional=4.8.1227
Avast Avast Antivirus Professional=4.7.844
Avast Avast Antivirus Home=4.8.1169
Avast Avast Antivirus Home=4.8.1227
Avast Avast Antivirus Home=4.7.869
Avast Avast Antivirus Home=4.7.1043
Avast Avast Antivirus Professional=4.7.1098
Avast Avast Antivirus Home=4.7.844
Avast Avast Antivirus Home=4.7.827
Avast Avast Antivirus Home=4.8.1290
Avast Avast Antivirus Home=4.8.1195
Event History
Oct 1, 2009
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-3524?
The severity of CVE-2009-3524 is currently unspecified, indicating unknown impact and attack vectors.
2
How can I mitigate CVE-2009-3524?
To mitigate CVE-2009-3524, users should upgrade to a version of Avast! that is at least 4.8.1356 or above.
3
What versions of Avast! are affected by CVE-2009-3524?
CVE-2009-3524 affects Avast! Home and Professional versions prior to 4.8.1356.
4
Can CVE-2009-3524 be exploited remotely?
CVE-2009-3524 has local attack vectors, meaning it cannot be exploited remotely without local access.
5
Is there an official patch for CVE-2009-3524?
Yes, the official resolution for CVE-2009-3524 is included in Avast! updates following version 4.8.1356.