Improper input validation in Avast Avast_antivirus_home
CVE-2010-0705
Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly validate input to IOCTL 0xb2d60030, which allows local users to cause a denial of service (system crash) or execute arb…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.009 (56.7th percentile) — read the EPSS interpretation.
Affected products
- Avast Avast_antivirus_home — versions 4.8.1368.0, 4.8.1282, 4.8.1229
- Avast Avast_antivirus_professional — versions 4.8.1368.0, 4.8.1282, 4.8.1229
- Microsoft Windows_2000
- Microsoft Windows_xp
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
Frequently asked questions
- What is CVE-2010-0705?
- CVE-2010-0705 is a vulnerability in Avast Avast_antivirus_home, classified under Improper Input Validation. Published 2010-02-25.
- Is CVE-2010-0705 known to be exploited?
- 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.