RSS   Vulnerabilities for 'Avast! internet security'   RSS

2014-12-27
 
CVE-2010-5075

CWE-189
 
 
Integer overflow in aswFW.sys 5.0.594.0 in Avast! Internet Security 5.0 Korean Trial allows local users to cause a denial of service (memory corruption and panic) via a crafted IOCTL_ASWFW_COMM_PIDINFO_RESULTS DeviceIoControl request to \\.\aswFW.

 
2012-08-25
 
CVE-2010-5151

 
 
** DISPUTED ** Race condition in avast! Internet Security 5.0.462 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution, aka an argument-switch attack or a KHOBE attack. NOTE: this issue is disputed by some third parties because it is a flaw in a protection mechanism for situations where a crafted program has already begun to execute.

 

 >>> Vendor: Avast! 2 Products
Avast! antivirus
Avast! internet security

Copyright 2024, cxsecurity.com

 

Back to Top