Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-1625.
AI-analyzed exploit summary This exploit targets a privilege escalation vulnerability in avast! 4.7's aavmker4.sys driver. It leverages arbitrary memory writes and function pointer manipulation to execute a ring0 payload, ultimately spawning a bindshell on port 4444.
Description
aavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to IOCTL 0xb2d60030, which allows local users to gain privileges via certain IOCTL requests.
Exploits (1)
This exploit targets a privilege escalation vulnerability in avast! 4.7's aavmker4.sys driver. It leverages arbitrary memory writes and function pointer manipulation to execute a ring0 payload, ultimately spawning a bindshell on port 4444.