CVE:CVE-2015-8620
CNNVD:CNNVD-201602-393
Avast Internet Security等都是捷克Avast（爱维士）公司的杀毒软件。
多款Avast产品的Avast虚拟驱动程序(aswSnx.sys)中存在基于堆的缓冲区溢出漏洞。本地攻击者可借助IOCTL请求中的Unicode文件路径利用该漏洞获取权限。以下产品及版本受到影响：Avast Internet Security，Pro Antivirus，Premier，Free Antivirus 11.1.2253之前版本。
solution:Upgrade avast avast_free_antivirus to a higher version than 11.1.2245,and avoid the version (,11.1.2245]; Upgrade avast avast_internet_security to a higher version than 11.1.2245,and avoid the version (,11.1.2245]; Upgrade avast avast_premier to a higher version than 11.1.2245,and avoid the version (,11.1.2245]; Upgrade avast avast_pro_antivirus to a higher version than 11.1.2245,and avoid the version (,11.1.2245]