Buffer overflow in Alwil Avast Antivirus

CVE-2005-1770

Buffer overflow in the Aavmker4 device driver in Avast! Antivirus 4.6 and possibly other versions allows local users to cause a denial of service (system crash) and possibly execute arbitrary code via certain signals combined with crafted input.

Vulnerability class: Buffer Overflow

EPSS: 0.007 (50.4th percentile) — read the EPSS interpretation.

Affected products

Alwil Avast_antivirus — versions 4.0.168, 4.0.172, 4.0.183
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cve@mitre.org (Exploit, x_refsource_MISC, Vendor Advisory)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)