are vulnerable to Local Privilege Escalation due to CmdAgent's handling of COM clients. This results in CmdVirth.exe and its child svchost.exe instances to terminate.Ĭomodo Antivirus versions up to 12. A low privileged local process can connect to this port and send an LPC_DATAGRAM, which triggers an Access Violation due to hardcoded NULLs used for Source parameter in a memcpy operation that is called for this handler. are vulnerable to a local Denial of Service affecting CmdVirth.exe via its LPC port "cmdvrtLPCServerPort". This DLL is then loaded into a high-privileged service before the binary signature validation logic is loaded, and might bypass some of the self-defense mechanisms.Ĭomodo Antivirus versions up to 12. A DLL Preloading vulnerability allows an attacker to implant an unsigned DLL named iLog.dll in a partially unprotected product directory. This allows an attacker to cause a denial of service (BSOD) when an executable is run inside the container.Īn issue was discovered in signmgr.dll 6.5.0.819 in Comodo Internet Security through 12.0. can be triggered due to a race condition when handling IRP_MJ_CLEANUP requests in the minifilter for directory change notifications. Cavwp.exe loads Comodo antivirus definition database in unsecured global section objects, allowing a local low privileged process to modify this data directly and change virus signatures.Ī use-after-free flaw in the sandbox container implemented in cmdguard.sys in Comodo Antivirus 12. are vulnerable to Arbitrary File Write due to Cavwp.exe handling of Comodo's Antivirus database. Web Console in Comodo UTM Firewall before 2.7.0 allows remote attackers to execute arbitrary code without authentication via a crafted URL.Ĭomodo Antivirus versions up to 12. To escalate privilege, a low-privileged attacker can use an NTFS directory junction to restore a malicious DLL from quarantine into the System32 folder. has a quarantine flaw that allows privilege escalation.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |