CVE-2019-3972

2019-07-1720:40:37

tenable

www.cve.org

6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.0%

JSON

Comodo Antivirus versions 12.0.0.6810 and below are vulnerable to Denial of Service affecting CmdAgent.exe via an unprotected section object “<GUID>_CisSharedMemBuff”. This section object is exposed by CmdAgent and contains a SharedMemoryDictionary object, which allows a low privileged process to modify the object data causing CmdAgent.exe to crash.

CNA Affected

[
  {
    "product": "Comodo Antivirus",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Versions 12.0.0.6810 and below"
      }
    ]
  }
]

References

www.tenable.com/security/research/tra-2019-34