7.2
HIGH
CVE-2009-4049
Avast! Home and Professional Heap-based Buffer Overflow Vulnerability
Description

Heap-based buffer overflow in aswRdr.sys (aka the TDI RDR driver) in avast! Home and Professional 4.8.1356.0 allows local users to cause a denial of service (memory corruption) or possibly gain privileges via crafted arguments to IOCTL 0x80002024.

INFO

Published Date :

Nov. 23, 2009, 5:30 p.m.

Last Modified :

Nov. 21, 2024, 1:08 a.m.

Remotely Exploitable :

No

Impact Score :

10.0

Exploitability Score :

3.9
Public PoC/Exploit Available at Github

CVE-2009-4049 has a 1 public PoC/Exploit available at Github. Go to the Public Exploits tab to see the list.

Affected Products

The following products are affected by CVE-2009-4049 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Avast avast_antivirus_home
2 Avast avast_antivirus_professional

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Heap-based buffer overflow in aswRdr.sys (aka the TDI RDR driver) in avast! Home and Professional 4.8.1356.0 allows local users to cause a denial of service (memory corruption) or possibly gain privileges via crafted arguments to IOCTL 0x80002024.

C

Updated: 1 year, 4 months ago
0 stars 0 fork 0 watcher
Born at : July 10, 2022, 5:53 a.m. This repo has been linked 1 different CVEs too.

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2009-4049 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2009-4049 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by af854a3a-2127-422b-91ae-364da2661108

    Nov. 21, 2024

    Action Type Old Value New Value
    Added Reference http://secunia.com/advisories/37368
    Added Reference http://www.efblog.net/2009/11/avast-aswrdrsys-kernel-pool-corruption.html
    Added Reference http://www.securityfocus.com/archive/1/507891/100/0/threaded
    Added Reference http://www.securityfocus.com/bid/37031
    Added Reference http://www.vupen.com/english/advisories/2009/3266
    Added Reference https://www.evilfingers.com/advisory/Advisory/Avast_aswRdr_sys_Kernel_Pool_Corruption_and_Local_Privilege_Escalation.php
  • CVE Modified by [email protected]

    May. 14, 2024

    Action Type Old Value New Value
  • CVE Modified by [email protected]

    Oct. 10, 2018

    Action Type Old Value New Value
    Removed Reference http://www.securityfocus.com/archive/1/archive/1/507891/100/0/threaded [Exploit]
    Added Reference http://www.securityfocus.com/archive/1/507891/100/0/threaded [No Types Assigned]
  • Initial Analysis by [email protected]

    Nov. 23, 2009

    Action Type Old Value New Value
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
Exploit Prediction

EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days.

0.04 }} -0.02%

score

0.07902

percentile

CVSS2 - Vulnerability Scoring System
Access Vector
Access Complexity
Authentication
Confidentiality
Integrity
Availability