CVE-2010-0705: Input Validation
Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly validate input to IOCTL 0xb2d60030, which allows local users to cause a denial of service (system crash) or execute arbitrary code to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0705?
CVE-2010-0705 is considered a high severity vulnerability due to its potential to allow local users to cause system crashes and execute arbitrary code.
How do I fix CVE-2010-0705?
To fix CVE-2010-0705, you should update avast! antivirus to version 5.0.418.0 or later.
What versions of Avast are affected by CVE-2010-0705?
CVE-2010-0705 affects avast! version 4.8 through 4.8.1368.0 and all versions of 5.0 prior to 5.0.418.0 on Windows 2000 and XP.
What is the impact of CVE-2010-0705?
The impact of CVE-2010-0705 includes the potential for denial of service and privilege escalation through crafted IOCTL requests.
Who is affected by CVE-2010-0705?
Local users running affected versions of avast! antivirus on Windows 2000 or XP are vulnerable to CVE-2010-0705.