CVE-2008-1625: Avast Antivirus Home

Medium severity, CVSS 6.8. EPSS: 0.7% chance of exploitation in the next 30 days.

aavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to IOCTL 0xb2d60030, which allows local users to gain privileges via certain IOCTL requests.

Affected products

• Avast Avast Antivirus Home: version 4.7.827 only; version 4.7.844 only; version 4.7.869 only; version 4.7.1043 only; version 4.7.1098 only
• Avast Avast Antivirus Professional: version 4.7.827 only; version 4.7.844 only; version 4.7.1043 only; version 4.7.1098 only

Published 2008-04-02. Last modified 2026-06-16.