CVE-2015-8620

Name of the Vulnerable Software and Affected Versions Avast Internet Security versions prior to 11.1.2253 Avast Pro Antivirus versions prior to 11.1.2253 Avast Premier versions prior to 11.1.2253 Avast Free Antivirus versions prior to 11.1.2253

Description A heap-based buffer overflow issue exists in the Avast virtualization driver, aswSnx.sys, which can be exploited by local users to gain privileges. This is achieved by using a Unicode file path in an IOCTL request.

Recommendations For Avast Internet Security versions prior to 11.1.2253, update to version 11.1.2253 or later. For Avast Pro Antivirus versions prior to 11.1.2253, update to version 11.1.2253 or later. For Avast Premier versions prior to 11.1.2253, update to version 11.1.2253 or later. For Avast Free Antivirus versions prior to 11.1.2253, update to version 11.1.2253 or later.