Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
aavmKer4.sys in avast! Home and Professional for Windows before 4.8.1356 does not properly validate input to IOCTLs (1) 0xb2d6000c and (2) 0xb2d60034, which allows local users to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption, a different vulnerability than CVE-2008-1625.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
avast_antivirus_home aavmKer4.sys 输入验证漏洞
Vulnerability Description
Windows下的avast!家庭版和专业版4.8.1356的之前版本中的aavmKer4.sys没有正确的验证对IOCTLs(1)0xb2d6000c和(2)0xb2d60034的输入，这使得本地用户可以借助IOCTL请求，获得特权。该IOCTL请求使用特质的会出发内存破坏的内核地址。此漏洞不同于CVE-2008-1625。
CVSS Information
N/A
Vulnerability Type
N/A