CVE-2010-0705
HIGH · CVSS 7.2EPSS 0.9%EU EUVD
Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly validate input to IOCTL 0xb2d60030, which allows local users to cause a denial of service (system crash) or execute arbitrary code to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption.
Key facts
- CVSS score
- 7.2 (v2.0)
- Severity
- HIGH
- CVSS vector
AV:L/AC:L/Au:N/C:C/I:C/A:C- Weakness (CWE)
- CWE-20
- EPSS score
- 0.9% (61th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2010-0732)
- Published
- February 25, 2010
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2010-0732 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.
View on the EU Vulnerability DatabaseAffected products
- avast / avast antivirus home
- avast / avast antivirus home
- avast / avast antivirus home
- avast / avast antivirus home
- avast / avast antivirus home
- avast / avast antivirus home
- avast / avast antivirus home
- avast / avast antivirus home
- avast / avast antivirus home
- avast / avast antivirus home
- avast / avast antivirus home
- avast / avast antivirus home
- avast / avast antivirus professional
- avast / avast antivirus professional
- avast / avast antivirus professional
- avast / avast antivirus professional
- avast / avast antivirus professional
- avast / avast antivirus professional
- avast / avast antivirus professional
- avast / avast antivirus professional
- avast / avast antivirus professional
- avast / avast antivirus professional
- avast / avast antivirus professional
- avast / avast antivirus professional
- avast / avast antivirus professional
- microsoft / windows 2000
- microsoft / windows xp
References
- http://forum.avast.com/index.php?topic=55484.0(Vendor Advisory)
- http://osvdb.org/62510
- http://secunia.com/advisories/38677(Vendor Advisory)
- http://secunia.com/advisories/38689(Vendor Advisory)
- http://www.securityfocus.com/archive/1/509710/100/0/threaded
- http://www.securityfocus.com/bid/38363
- http://www.securitytracker.com/id?1023644
- http://www.trapkit.de/advisories/TKADV2010-003.txt
- http://www.vupen.com/english/advisories/2010/0449(Vendor Advisory)
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain