Vulnerabilities > Avast > Avast Antivirus Home > Medium

DATE CVE VULNERABILITY TITLE RISK
2009-10-01 CVE-2009-3523 Improper Input Validation vulnerability in Avast Antivirus Home and Avast Antivirus Professional
aavmKer4.sys in avast! Home and Professional for Windows before 4.8.1356 does not properly validate input to IOCTLs (1) 0xb2d6000c and (2) 0xb2d60034, which allows local users to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption, a different vulnerability than CVE-2008-1625.
local
avast CWE-20
6.9
2008-04-02 CVE-2008-1625 Permissions, Privileges, and Access Controls vulnerability in Avast Antivirus Home and Avast Antivirus Professional
aavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to IOCTL 0xb2d60030, which allows local users to gain privileges via certain IOCTL requests.
local
low complexity
avast CWE-264
6.8
2007-12-07 CVE-2007-6265 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Avast Antivirus Home and Avast Antivirus Professional
Unspecified vulnerability in avast! 4 Home and Professional Editions before 4.7.1098 allows remote attackers to have an unknown impact via a crafted TAR archive.
network
avast CWE-119
6.8