CVE-2009-3523
avast! Home and Professional < 4.8.1356 - Local Privilege Escalation via IOCTL Input Validation
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2009-3523.
AI-analyzed exploit summary This is a functional privilege escalation exploit targeting a vulnerability in avast! 4.7's aavmker4.sys driver. It leverages arbitrary memory writes and function pointer manipulation to execute a ring0 payload, ultimately spawning a bindshell on port 4444.
Description
aavmKer4.sys in avast! Home and Professional for Windows before 4.8.1356 does not properly validate input to IOCTLs (1) 0xb2d6000c and (2) 0xb2d60034, which allows local users to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption, a different vulnerability than CVE-2008-1625.
Exploits (1)
This is a functional privilege escalation exploit targeting a vulnerability in avast! 4.7's aavmker4.sys driver. It leverages arbitrary memory writes and function pointer manipulation to execute a ring0 payload, ultimately spawning a bindshell on port 4444.