4.7.1098

DATE	CVE	VULNERABILITY TITLE	RISK
2009-10-01	CVE-2009-3524	Unspecified vulnerability in Avast Antivirus Home and Avast Antivirus Professional Unspecified vulnerability in ashWsFtr.dll in avast! Home and Professional for Windows before 4.8.1356 has unknown impact and local attack vectors. local low complexity avast	7.2
2009-10-01	CVE-2009-3523	Improper Input Validation vulnerability in Avast Antivirus Home and Avast Antivirus Professional aavmKer4.sys in avast! Home and Professional for Windows before 4.8.1356 does not properly validate input to IOCTLs (1) 0xb2d6000c and (2) 0xb2d60034, which allows local users to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption, a different vulnerability than CVE-2008-1625. local avast CWE-20	6.9
2008-04-02	CVE-2008-1625	Permissions, Privileges, and Access Controls vulnerability in Avast Antivirus Home and Avast Antivirus Professional aavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to IOCTL 0xb2d60030, which allows local users to gain privileges via certain IOCTL requests. local low complexity avast CWE-264	6.8
2007-05-09	CVE-2007-1673	Resource Management Errors vulnerability in multiple products unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file. network low complexity amavis avast avira panda picozip rahul-dhesi unzoo winace barracuda-networks CWE-399	7.8