CVE-2009-3523
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 0.8%
from disclosure to weapon208 days
Published on NVDOct 1
1st PoC+208d
exploitation probability
0.8%top 47% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
aavmKer4.sys in avast! Home and Professional for Windows before 4.8.1356 does not properly validate input to IOCTLs (1) 0xb2d6000c and (2) 0xb2d60034, which allows local users to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption, a different vulnerability than CVE-2008-1625.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/12406⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.