CVE-2009-3522

HIGH 7.2CVE-2009-3522 · Published 01/10/2009 · updated 16/06/2026

In short

CVE-2009-3522 is a HIGH (CVSS 7.2) vulnerability affecting avast antivirus home (avast), avast antivirus professional (avast).
Chance of exploitation in the next 30 days (EPSS): 0.95%, higher than 61.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
avast antivirus home avast	`= 4.8.1351`	No fix yet
avast antivirus professional avast	`= 4.8.1351`	No fix yet

Description

Stack-based buffer overflow in aswMon2.sys in avast! Home and Professional for Windows 4.8.1351, and possibly other versions before 4.8.1356, allows local users to cause a denial of service (system crash) and possibly gain privileges via a crafted IOCTL request to IOCTL 0xb2c80018.

References

osvdb.org/58402
secunia.com/advisories/36858 · Vendor Advisory
avast.com/eng/avast-4-home_pro-revision-history.html · Vendor Advisory
securityfocus.com/archive/1/506681/100/0/threaded
securityfocus.com/bid/36507 · Exploit
securitytracker.com/id
vupen.com/english/advisories/2009/2761 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/53456
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6226
evilfingers.com/advisory/Advisory/Avast_aswMon2.sys_kernel_memory_corruption_and_Local_Privilege_Escalation.php · Exploit

More vulnerabilities in avast antivirus home

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free