A vulnerability has been discovered in avast! Home/Professional, which can be exploited by malicious, local users to cause a DoS (Denial of Service) or potentially gain escalated privileges.

The vulnerability is caused due to an error in aswRdr.sys when processing IOCTLs. This can be exploited to corrupt kernel memory via a specially crafted 0x80002024 IOCTL.

Successful exploitation may allow execution of arbitrary code with SYSTEM privileges.

The vulnerability is confirmed in avast! Home version 4.8.1356. Other versions may also be affected.

Solution
Update to version 4.8.1367.

Provided and/or discovered by
Independently discovered by Giuseppe 'Evilcry' Bonfa and AbdulAziz Hariri.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Avast:
http://www.avast.com/eng/avast-4-home_pro-revision-history.html

EvilFingers:
https://www.evilfingers.com/advisory/Advisory/Avast_aswRdr_sys_Kernel_Pool_Corruption_and_Local_Privilege_Escalation.php

Deep Links
Links available to Secunia VIM customers