NVD

Id
28712  
Name
CVE-2015-8620  
Description
Heap-based buffer overflow in the Avast virtualization driver (aswSnx.sys) in Avast Internet Security, Pro Antivirus, Premier, and Free Antivirus before 11.1.2253 allows local users to gain privileges via a Unicode file path in an IOCTL request.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-04-13  
Modified Date
2016-04-14  
Seq
2015-8620  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
151019 28712 CVE-2015-8620 http://packetstormsecurity.com/files/135859/Avast-11.1.2245-Heap-Overflow.html  View
151020 28712 CVE-2015-8620 20160222 Avast Virtualization Driver - Elevation Of Privileges  View
151021 28712 CVE-2015-8620 1035093  View
151022 28712 CVE-2015-8620 https://www.nettitude.co.uk/exploiting-a-kernel-paged-pool-buffer-overflow-in-avast-virtualization-driver/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11724 JVNDB-2015-007044 複数の Avast 製品の Avast 仮想化ドライバにおけるヒープベースのバッファオーバーフローの脆弱性 複数の Avast 製品の Avast 仮想化ドライバ (aswSnx.sys) には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2015-8620 85845 CVE-2015-8620 28712 10 7.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007044.html 2015-12-23 2016-04-18 View