CVE-2010-0705

CVE-2010-0705 is a critical vulnerability affecting avast! Antivirus versions 4.8 through 5.0.418.0 on Windows 2000 and XP. It stems from improper input validation in the aavmker4.sys driver, allowing local users to trigger a denial of service or execute arbitrary code for privilege escalation. With a CVSS score of 7.2, this vulnerability is highly severe, requiring local access but having low attack complexity, and potentially leading to complete compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV or showing active exploitation, a Metasploit module and an ExploitDB entry (EDB-12406) confirm the availability of exploit code, though it has received minimal community discussion or media coverage.