What’s Vulnerable › Vulnerabilities

CVE-2009-4049

• Severity: high (CVSS 7.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2009-11-23 · updated 2026-06-16
• Weakness: CWE-119

Description

Heap-based buffer overflow in aswRdr.sys (aka the TDI RDR driver) in avast! Home and Professional 4.8.1356.0 allows local users to cause a denial of service (memory corruption) or possibly gain privileges via crafted arguments to IOCTL 0x80002024.

Affected products

• Avast Antivirus Home: 4.8.1356.0
• Avast Antivirus Professional: 4.8.1356.0

References

• http://secunia.com/advisories/37368
• http://www.efblog.net/2009/11/avast-aswrdrsys-kernel-pool-corruption.html
• http://www.securityfocus.com/archive/1/507891/100/0/threaded
• http://www.securityfocus.com/bid/37031
• http://www.vupen.com/english/advisories/2009/3266
• https://www.evilfingers.com/advisory/Advisory/Avast_aswRdr_sys_Kernel_Pool_Corruption_and_Local_Privilege_Escalation.php
• http://secunia.com/advisories/37368
• http://www.efblog.net/2009/11/avast-aswrdrsys-kernel-pool-corruption.html
• http://www.securityfocus.com/archive/1/507891/100/0/threaded
• http://www.securityfocus.com/bid/37031
• http://www.vupen.com/english/advisories/2009/3266
• https://www.evilfingers.com/advisory/Advisory/Avast_aswRdr_sys_Kernel_Pool_Corruption_and_Local_Privilege_Escalation.php

Get alerted when CVE-2009-4049 or the next vulnerability affects your stack