NVD

Id
12251  
Name
CVE-2010-0705  
Description
Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly validate input to IOCTL 0xb2d60030, which allows local users to cause a denial of service (system crash) or execute arbitrary code to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-02-25  
Modified Date
2010-02-26  
Seq
2010-0705  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
67420 12251 CVE-2010-0705 http://forum.avast.com/index.php?topic=55484.0  View
67421 12251 CVE-2010-0705 20100223 [TKADV2010-003] avast! 4.8 and 5.0 aavmker4.sys Kernel Memory Corruption  View
67422 12251 CVE-2010-0705 38363  View
67423 12251 CVE-2010-0705 1023644  View
67424 12251 CVE-2010-0705 http://www.trapkit.de/advisories/TKADV2010-003.txt  View
67425 12251 CVE-2010-0705 ADV-2010-0449  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
38078 JVNDB-2010-003863 Windows 2000 および XP 上で稼動する avast! の Aavmker4.sys におけるサービス運用妨害 (DoS) の脆弱性 Windows 2000 および XP 上で稼動する avast! の Aavmker4.sys は、IOCTL 0xb2d60030 への入力を適切に検証しないため、サービス運用妨害 (システムクラッシュ) 状態となる、または権限を取得する任意のコードを実行される脆弱性が存在します。 CVE-2010-0705 43285 CVE-2010-0705 12251 7.2 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003863.html 2010-02-25 2012-06-26 View