CVEvulnerability
CVE-2016-4025
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2016-11-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.5 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-254
Description
Avast Internet Security v11.x.x, Pro Antivirus v11.x.x, Premier v11.x.x, Free Antivirus v11.x.x, Business Security v11.x.x, Endpoint Protection v8.x.x, Endpoint Protection Plus v8.x.x, Endpoint Protection Suite v8.x.x, Endpoint Protection Suite Plus v8.x.x, File Server Security v8.x.x, and Email Server Security v8.x.x allow attackers to bypass the DeepScreen feature via a DeviceIoControl call.
Affected configurations
• avast business security 11.1.2241
• avast business security 11.1.2245
• avast business security 11.1.2253
• avast business security 11.1.2260
• avast business security 11.1.2261
• avast business security 11.1.2262
• avast free antivirus 11.1.2241
• avast free antivirus 11.1.2245
• avast free antivirus 11.1.2253
• avast free antivirus 11.1.2260
• avast free antivirus 11.1.2261
• avast free antivirus 11.1.2262
• avast internet security 11.1.2241
• avast internet security 11.1.2245
• avast internet security 11.1.2253
• avast internet security 11.1.2260
• avast internet security 11.1.2261
• avast internet security 11.1.2262
• avast premier 11.1.2241
• avast premier 11.1.2245
• avast premier 11.1.2253
• avast premier 11.1.2260
• avast premier 11.1.2261
• avast premier 11.1.2262
• avast pro antivirus 11.1.2241
• avast pro antivirus 11.1.2245
• avast pro antivirus 11.1.2253
• avast pro antivirus 11.1.2260
• avast pro antivirus 11.1.2261
• avast pro antivirus 11.1.2262
• avast email server security (<= 8.0.1609)
• avast email server security 8.0.1606
• avast endpoint protection (<= 8.0.1609)
• avast endpoint protection 8.0.1606
• avast endpoint protection plus 8.0.1606
• avast endpoint protection plus 8.0.1609
• avast endpoint protection suite (<= 8.0.1609)
• avast endpoint protection suite 8.0.1606
• avast endpoint protection suite plus (<= 8.0.1609)
• avast endpoint protection suite plus 8.0.1606
• avast file server security (<= 8.0.1609)
• avast file server security 8.0.1606
Related
Weakness · not in database (1)
References
- https://labs.nettitude.com/blog/escaping-avast-sandbox-using-single-ioctl-cve-2016-4025/ Technical Description, Third Party Advisory
- https://labs.nettitude.com/blog/escaping-avast-sandbox-using-single-ioctl-cve-2016-4025/ Technical Description, Third Party Advisory