CVE-2010-5075: Integer overflow in aswFW.sys 5.0.594.0 in Avast!

Security readout for executives and security teams

This is a legacy Avast endpoint-security driver flaw that could let someone with local access crash an affected Windows system. The available sources describe denial of service, not remote compromise or data theft. Exposure should be limited to systems still running the specific Avast Internet Security 5.0 Korean Trial driver version. Likely exposure is narrow: Windows endpoints with Avast! Internet Security 5.0 Korean Trial using aswFW.sys 5.0.594.0. Organizations without this legacy driver are unlikely to be affected based on the provided evidence. Treat this as a targeted legacy-risk cleanup item, not an internet-wide emergency. The business concern is endpoint downtime from a local crash condition on outdated security software. Mitigation focus: Inventory endpoints for Avast Internet Security 5.0 Korean Trial and aswFW.sys 5.0.594.0.; Remove or upgrade unsupported Avast installations after checking vendor guidance.; Prioritize replacement on shared workstations or systems where local users are untrusted..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.