CVE:CVE-2009-3523
CNNVD:CNNVD-200910-114
Windows下的avast!家庭版和专业版4.8.1356的之前版本中的aavmKer4.sys没有正确的验证对IOCTLs(1)0xb2d6000c和(2)0xb2d60034的输入，这使得本地用户可以借助IOCTL请求，获得特权。该IOCTL请求使用特质的会出发内存破坏的内核地址。此漏洞不同于CVE-2008-1625。
solution:Upgrade avast avast_antivirus_home to a higher version than 4.8.1351,4.7.827,4.7.844,4.7.869,4.7.1043,4.7.1098,4.8.1169,4.8.1195,4.8.1201,4.8.1227,4.8.1229,4.8.1282,4.8.1290,4.8.1296,4.8.1335,and avoid the version (,4.8.1351],4.7.827,4.7.844,4.7.869,4.7.1043,4.7.1098,4.8.1169,4.8.1195,4.8.1201,4.8.1227,4.8.1229,4.8.1282,4.8.1290,4.8.1296,4.8.1335; Upgrade avast avast_antivirus_professional to a higher version than 4.8.1351,4.7.827,4.7.844,4.7.1043,4.7.1098,4.8.1169,4.8.1195,4.8.1201,4.8.1227,4.8.1229,4.8.1282,4.8.1290,4.8.1296,4.8.1335,and avoid the version (,4.8.1351],4.7.827,4.7.844,4.7.1043,4.7.1098,4.8.1169,4.8.1195,4.8.1201,4.8.1227,4.8.1229,4.8.1282,4.8.1290,4.8.1296,4.8.1335