CVE-2008-1625

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 0.7%

from disclosure to weapon755 days

Published on NVDApr 2

1st PoC+755d

exploitation probability

0.7%top 50% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

aavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to IOCTL 0xb2d60030, which allows local users to gain privileges via certain IOCTL requests.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/12406

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://secunia.com/advisories/29605 https://exchange.xforce.ibmcloud.com/vulnerabilities/41527 http://www.avast.com/eng/avast-4-home_pro-revision-history.html http://www.securityfocus.com/archive/1/490321/100/0/threaded http://www.securityfocus.com/bid/28502 http://www.securitytracker.com/id?1019732 http://www.trapkit.de/advisories/TKADV2008-002.txt http://www.vupen.com/english/advisories/2008/1034/references