Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-5075. PoCs published by x90c.
AI-analyzed exploit summary This exploit demonstrates a memory pool corruption vulnerability in Avast! Internet Security 5.0's 'aswFW.sys' kernel driver via an IOCTL call (0x829C0964). The PoC triggers an integer overflow during pool allocation and a subsequent buffer overflow, leading to a kernel panic (DoS).
Description
Integer overflow in aswFW.sys 5.0.594.0 in Avast! Internet Security 5.0 Korean Trial allows local users to cause a denial of service (memory corruption and panic) via a crafted IOCTL_ASWFW_COMM_PIDINFO_RESULTS DeviceIoControl request to \\.\aswFW.
Exploits (1)
This exploit demonstrates a memory pool corruption vulnerability in Avast! Internet Security 5.0's 'aswFW.sys' kernel driver via an IOCTL call (0x829C0964). The PoC triggers an integer overflow during pool allocation and a subsequent buffer overflow, leading to a kernel panic (DoS).