CVE-2009-3522: Avast Antivirus Home

High severity, CVSS 7.2. EPSS: 0.9% chance of exploitation in the next 30 days.

Stack-based buffer overflow in aswMon2.sys in avast! Home and Professional for Windows 4.8.1351, and possibly other versions before 4.8.1356, allows local users to cause a denial of service (system crash) and possibly gain privileges via a crafted IOCTL request to IOCTL 0xb2c80018.

Affected products

• Avast Avast Antivirus Home: version 4.8.1351 only
• Avast Avast Antivirus Professional: version 4.8.1351 only

Published 2009-10-01. Last modified 2026-06-16.