CVE-2010-0705: Input Validation
First published: Thu Feb 25 2010(Updated: )
Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly validate input to IOCTL 0xb2d60030, which allows local users to cause a denial of service (system crash) or execute arbitrary code to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Avast Antivirus | <=5.0.396.0 | |
| Avast Antivirus | =4.8.1169 | |
| Avast Antivirus | =4.8.1195 | |
| Avast Antivirus | =4.8.1201 | |
| Avast Antivirus | =4.8.1227 | |
| Avast Antivirus | =4.8.1229 | |
| Avast Antivirus | =4.8.1282 | |
| Avast Antivirus | =4.8.1290 | |
| Avast Antivirus | =4.8.1296 | |
| Avast Antivirus | =4.8.1335 | |
| Avast Antivirus | =4.8.1351 | |
| Avast Antivirus | =4.8.1368.0 | |
| Avast Pro Antivirus | <=5.0.396.0 | |
| Avast Pro Antivirus | =4.8.1169 | |
| Avast Pro Antivirus | =4.8.1195 | |
| Avast Pro Antivirus | =4.8.1201 | |
| Avast Pro Antivirus | =4.8.1227 | |
| Avast Pro Antivirus | =4.8.1229 | |
| Avast Pro Antivirus | =4.8.1282 | |
| Avast Pro Antivirus | =4.8.1290 | |
| Avast Pro Antivirus | =4.8.1296 | |
| Avast Pro Antivirus | =4.8.1335 | |
| Avast Pro Antivirus | =4.8.1351 | |
| Avast Pro Antivirus | =4.8.1356.0 | |
| Avast Pro Antivirus | =4.8.1368.0 | |
| Microsoft Windows 2000 | ||
| Microsoft Windows XP |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.vupen.com/english/advisories/2010/0449
- http://forum.avast.com/index.php?topic=55484.0
- http://secunia.com/advisories/38677
- http://www.trapkit.de/advisories/TKADV2010-003.txt
- http://www.securitytracker.com/id?1023644
- http://secunia.com/advisories/38689
- http://www.securityfocus.com/bid/38363
- http://osvdb.org/62510
- http://www.securityfocus.com/archive/1/509710/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2010-0705?
CVE-2010-0705 is considered a high severity vulnerability due to its potential to allow local users to cause system crashes and execute arbitrary code.
How do I fix CVE-2010-0705?
To fix CVE-2010-0705, you should update avast! antivirus to version 5.0.418.0 or later.
What versions of Avast are affected by CVE-2010-0705?
CVE-2010-0705 affects avast! version 4.8 through 4.8.1368.0 and all versions of 5.0 prior to 5.0.418.0 on Windows 2000 and XP.
What is the impact of CVE-2010-0705?
The impact of CVE-2010-0705 includes the potential for denial of service and privilege escalation through crafted IOCTL requests.
Who is affected by CVE-2010-0705?
Local users running affected versions of avast! antivirus on Windows 2000 or XP are vulnerable to CVE-2010-0705.
- collector/nvd-historical
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/references
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/avast
- canonical/avast antivirus
- version/avast antivirus/5.0.396.0
- version/avast antivirus/4.8.1169
- version/avast antivirus/4.8.1195
- version/avast antivirus/4.8.1201
- version/avast antivirus/4.8.1227
- version/avast antivirus/4.8.1229
- version/avast antivirus/4.8.1282
- version/avast antivirus/4.8.1290
- version/avast antivirus/4.8.1296
- version/avast antivirus/4.8.1335
- version/avast antivirus/4.8.1351
- version/avast antivirus/4.8.1368.0
- canonical/avast pro antivirus
- version/avast pro antivirus/5.0.396.0
- version/avast pro antivirus/4.8.1169
- version/avast pro antivirus/4.8.1195
- version/avast pro antivirus/4.8.1201
- version/avast pro antivirus/4.8.1227
- version/avast pro antivirus/4.8.1229
- version/avast pro antivirus/4.8.1282
- version/avast pro antivirus/4.8.1290
- version/avast pro antivirus/4.8.1296
- version/avast pro antivirus/4.8.1335
- version/avast pro antivirus/4.8.1351
- version/avast pro antivirus/4.8.1356.0
- version/avast pro antivirus/4.8.1368.0
- vendor/microsoft
- canonical/microsoft windows 2000
- canonical/microsoft windows xp