Avast Avast Antivirus Professional — known CVE vulnerabilities

Every CVE whose affected-product data names Avast Avast Antivirus Professional, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2007-1673 — CVSS 7.8 (high): unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite…
• CVE-2010-0705 — CVSS 7.2 (high): Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly validate input to…
• CVE-2009-3522 — CVSS 7.2 (high): Stack-based buffer overflow in aswMon2.sys in avast! Home and Professional for Windows 4.8.1351, and possibly other versions before…
• CVE-2009-3524 — CVSS 7.2 (high): Unspecified vulnerability in ashWsFtr.dll in avast! Home and Professional for Windows before 4.8.1356 has unknown impact and local attack…
• CVE-2009-4049 — CVSS 7.2 (high): Heap-based buffer overflow in aswRdr.sys (aka the TDI RDR driver) in avast! Home and Professional 4.8.1356.0 allows local users to cause a…
• CVE-2009-3523 — CVSS 6.9 (medium): aavmKer4.sys in avast! Home and Professional for Windows before 4.8.1356 does not properly validate input to IOCTLs (1) 0xb2d6000c and (2)…
• CVE-2008-1625 — CVSS 6.8 (medium): aavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to IOCTL 0xb2d60030, which allows local users…
• CVE-2007-6265 — CVSS 6.8 (medium): Unspecified vulnerability in avast! 4 Home and Professional Editions before 4.7.1098 allows remote attackers to have an unknown impact via…