CVE-2022-4291: Aswjsflt.dll in Avast Antivirus windows caused a crash of the Mozilla Firefox browser due to heap corruption
First published: Wed Dec 07 2022(Updated: )
The aswjsflt.dll library from Avast Antivirus windows contained a potentially exploitable heap corruption vulnerability that could enable an attacker to bypass the sandbox of the application it was loaded into, if applicable. This issue was fixed in version 18.0.1478 of the Script Shield Component.
Credit: security@nortonlifelock.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Avast Script Shield | <=18.0.1473.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2022-4291?
CVE-2022-4291 is a potentially exploitable heap corruption vulnerability in the aswjsflt.dll library from Avast Antivirus for Windows.
How does CVE-2022-4291 affect Avast Antivirus for Windows?
CVE-2022-4291 allows an attacker to bypass the sandbox of the application loaded with Avast Antivirus if applicable.
What is the severity of CVE-2022-4291?
CVE-2022-4291 has a severity rating of critical.
How can I fix CVE-2022-4291?
To fix CVE-2022-4291, update Avast Antivirus to version 18.0.1478 of the Script Shield Component.
Is there any more information available about CVE-2022-4291?
Yes, you can find more information about CVE-2022-4291 at the following reference: [https://support.norton.com/sp/static/external/tools/security-advisories.html](https://support.norton.com/sp/static/external/tools/security-advisories.html)
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/last-modified-date
- agent/title
- agent/severity
- agent/weakness
- agent/author
- agent/tags
- agent/first-publish-date
- agent/event
- agent/description
- vendor/avast
- canonical/avast script shield
- version/avast script shield/18.0.1473.0