Advisory Details

May 11th, 2017

Avast Free Antivirus aswSnx Kernel Driver Untrusted Pointer Dereference Privilege Escalation Vulnerability

CVE ID
CVSS SCORE	7.2, AV:L/AC:L/Au:N/C:C/I:C/A:C
AFFECTED VENDORS	Avast
AFFECTED PRODUCTS	Free Antivirus
VULNERABILITY DETAILS	This vulnerability allows attackers to elevate their privileges on vulnerable installations of Avast Free Antivirus. Authentication is not required to exploit this vulnerability. The specific flaw exists within processing of the 0x82ac0170 IOCTL by the aswSnx driver in the kernel. An address passed into the kernel through a DeviceIoControl call is trusted and used without validation. An attacker could leverage this vulnerability to execute arbitrary code in the context of the kernel.
ADDITIONAL DETAILS	Fixed in Avast v12.1, released 21 June 2016.
DISCLOSURE TIMELINE	2016-04-29 - Vulnerability reported to vendor 2017-05-11 - Coordinated public release of advisory
CREDIT	bee13oy of CloverSec Labs

BACK TO ADVISORIES