CVE-2009-4049

Heap-based buffer overflow in aswRdr.sys (aka the TDI RDR driver) in avast! Home and Professional 4.8.1356.0 allows local users to cause a denial of service (memory corruption) or possibly gain privileges via crafted arguments to IOCTL 0x80002024.

CVSS v2.0 NVD

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

1.10% chance of exploitation in the next 30 days, 65th percentile

Published

2009-11-23

Updated

2024-08-07

Proof-of-concept exploits (1)

• fengjixuchui/CVE-2009-40491★ · 2022-07-10

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/33360

Security advisories

• http://secunia.com/advisories/37368
• http://www.vupen.com/english/advisories/2009/3266
• http://www.securityfocus.com/bid/37031

References

• CVE Record
• NVD entry

Related

• CVE-2003-0358
• CVE-2016-0095
• CVE-2019-18845
• CVE-2019-8038
• CVE-2019-8039
• CVE-2020-11492