CVE

Id
40958  
CVE No.
CVE-2009-3523  
Status
Candidate  
Description
aavmKer4.sys in avast! Home and Professional for Windows before 4.8.1356 does not properly validate input to IOCTLs (1) 0xb2d6000c and (2) 0xb2d60034, which allows local users to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption, a different vulnerability than CVE-2008-1625.  
Phase
Assigned (20091001)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
448470 40958 CVE-2009-3523 MISC:http://www.ntinternals.org/ntiadv0904/ntiadv0904.html  View
448471 40958 CVE-2009-3523 CONFIRM:http://www.avast.com/eng/avast-4-home_pro-revision-history.html  View
448472 40958 CVE-2009-3523 OVAL:oval:org.mitre.oval:def:6024  View
448473 40958 CVE-2009-3523 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6024  View
448474 40958 CVE-2009-3523 SECUNIA:36858  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42811 JVNDB-2009-003818 FreeBSD の IPC におけるサービス運用妨害 (DoS) 状態となる脆弱性 FreeBSD の Pipe (IPC) close 関数は、競合状態が発生するため、サービス運用妨害 (クラッシュ) 状態となる脆弱性が存在します。 CVE-2009-3527 40958 6.9 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003818.html  View