> Avast! Local Privilege Escalation and DoS Vulnerabilities, Vuln. #2 will not be fixed in Avast 4 but with v5 only：Calendar of Updates: Windows, Security Updates and Software Help（情報元のブックマーク数）
Avast!に複数の脆弱性が存在とのことで、アップデートが出ているそうですが、Avast4では修正されていない脆弱性もあるみたい。
Vulnerability #1
www.calendarofupdates.com
Local privilege escalation. A local attacker (unprivileged user) can modify %Program Files%\Alwil Software\Avast4\Data\avast4.ini file. "ISAPIFilter1" parameter in avast4.ini contains filename or full path to ISAPI filter module originally "ashWsFtr.dll". An attacker can replace the original path by path to the attackers malicious dynamic library (DLL). After restart attackers DLL will be loaded with SYSTEM privileges. This is local privilege escalation vulnerability.
Vulnerability #2
Denial of Service A local attacker (unprivileged user) could cause denial of service conditions in Avast! by deleting %Program Files%\Alwil Software\Avast4\Data\400.vps file. After system restart all Avast! modules failed to load.
