CVE-2009-3523 json
aavmKer4.sys in avast!
published 2009-10-01 17 y ago modified 2026-06-16 4 mo ago also EUVD-2009-3505
- cvss
- 6.9
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.8%
- EPSS 0.8% chance of exploitation in 30 days, percentile 56%
- public exploits
- 1
- Exploit-DB
Summary
aavmKer4.sys in avast! Home and Professional for Windows before 4.8.1356 does not properly validate input to IOCTLs (1) 0xb2d6000c and (2) 0xb2d60034, which allows local users to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption, a different vulnerability than CVE-2008-1625.
Timeline
- Published
- First public exploit (EDB-12406)
Exploit prediction
0.78% chance of exploitation in the next 30 days, higher than 56% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-12406 Avast! 4.7 - 'aavmker4.sys' Local Privilege Escalation local, 2010-04-27
- ntinternals.org http://www.ntinternals.org/ntiadv0904/ntiadv0904.html referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 6.9 | AV:L/AC:M/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-20 Improper Input Validation
References
-
ntinternals.org
/ntiadv0904/ntiadv0904.html
exploit
-
secunia.com
/advisories/36858
third-party-advisory, vendor-advisory
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6024
vdb-entry, signature
- avast.com /eng/avast-4-home_pro-revision-history.html
Sources
- CVE List CVE-2009-3523
- NVD CVE-2009-3523
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.