目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1000 元

100.0%
请我们喝杯咖啡

CVE-2009-4049 PoC — Avast! Antivirus aswRsr.sys驱动本地堆溢出漏洞

来源
https://github.com/fengjixuchui/CVE-2009-4049
关联漏洞
标题:Avast! Antivirus aswRsr.sys驱动本地堆溢出漏洞 (CVE-2009-4049)
Description:Avast! Antivirus是捷克Avast（爱维士）公司的一套杀毒软件。 Avast杀毒软件的aswRdr.sys驱动存在堆缓冲区溢出漏洞。攻击者可以借助特制的参数制作参数的IOCTL 0x80002024，导致拒绝服务或者获得访问特权。
Description
Heap-based buffer overflow in aswRdr.sys (aka the TDI RDR driver) in avast! Home and Professional 4.8.1356.0 allows local users to cause a denial of service (memory corruption) or possibly gain privileges via crafted arguments to IOCTL 0x80002024.
介绍
# CVE-2009-4049
 Heap-based buffer overflow in aswRdr.sys (aka the TDI RDR driver) in avast! Home and Professional 4.8.1356.0 allows local users to cause a denial of service (memory corruption) or possibly gain privileges via crafted arguments to IOCTL 0x80002024.

 While part of the reason as to why I did not finish this vulnerability is out of sheer laziness, it did not appear exploitable on the surface. It can achieve a local denial of service condition, but it does not appear that I can control the contents of memory. The only factor that can be controlled, from my tests, is the string scan loop iterations. No data appears to be passed to the output buffer, either.
文件快照

 [4.0K]  /data/pocs/15a5f45c7a3dae4b6cde80d8ff03032bf2eb024c
├── [4.0K]  CVE-2009-4049
│   ├── [1.4K]  CVE-2009-4049.sln
│   ├── [7.0K]  CVE-2009-4049.vcxproj
│   ├── [1.0K]  CVE-2009-4049.vcxproj.filters
│   ├── [1.4K]  exploit.c
│   └── [ 166]  exploit.h
└── [ 678]  README.md

1 directory, 6 files
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 如果因为来源失效或无法访问，请发送邮件到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
    3. 神龙已为您对 POC 代码进行快照，为了长期维护，请考虑为本地 POC 付费/捐赠，感谢您的支持。