CVE-2019-14694

CVE-2019-14694 describes a use-after-free in the sandbox container of Comodo Antivirus 12.0.0.6870, triggered by a race condition in the minifilter handling IRP_MJ_CLEANUP for directory change notifications. The flaw in cmdguard.sys could allow a local attacker to cause a denial of service (BSOD)...

CVE-2019-14694: Concurrent Execution using Shared Resource with Improper Synchronization

A use-after-free flaw in the sandbox container implemented in cmdguard.sys in Comodo Antivirus 12.0.0.6870 can be triggered due to a race condition when handling IRPMJCLEANUP requests in the minifilter for directory change notifications. This allows an attacker to cause a denial of service BSOD...

PT-2019-13788

Name of the Vulnerable Software and Affected Versions Comodo Antivirus version 12.0.0.6870 Description A use-after-free flaw in the sandbox container implemented in cmdguard.sys can be triggered due to a race condition when handling IRP MJ CLEANUP requests in the minifilter for directory change...

CVE-2019-14270

Comodo Antivirus through 12.0.0.6870, Comodo Firewall through 12.0.0.6870, and Comodo Internet Security Premium through 12.0.0.6870, with the Comodo Container feature, are vulnerable to Sandbox Escape...

CVE-2019-14270

Comodo Antivirus through 12.0.0.6870, Comodo Firewall through 12.0.0.6870, and Comodo Internet Security Premium through 12.0.0.6870, with the Comodo Container feature, are vulnerable to Sandbox Escape...

Design/Logic Flaw

Comodo Antivirus through 12.0.0.6870, Comodo Firewall through 12.0.0.6870, and Comodo Internet Security Premium through 12.0.0.6870, with the Comodo Container feature, are vulnerable to Sandbox Escape...

CVE-2019-14270

CVE-2019-14270 affects Comodo Antivirus, Comodo Firewall, and Comodo Internet Security Premium up to version 12.0.0.6870, which use the Comodo Container feature and are vulnerable to a Sandbox Escape. Connected documents confirm the affected products and the sandbox-escape vector, but do not prov...

CVE-2019-14270

Comodo Antivirus through 12.0.0.6870, Comodo Firewall through 12.0.0.6870, and Comodo Internet Security Premium through 12.0.0.6870, with the Comodo Container feature, are vulnerable to Sandbox Escape...

CVE-2019-14270: Undefined Security Weakness

Comodo Antivirus through 12.0.0.6870, Comodo Firewall through 12.0.0.6870, and Comodo Internet Security Premium through 12.0.0.6870, with the Comodo Container feature, are vulnerable to Sandbox Escape...

Comodo Antivirus explosion multiple vulnerabilities-vulnerability warning-the black bar safety net

Comodo is a company located in the United States software company, headquartered in Jersey City, was established in 1998, is a world-renowned IT security service provider and SSL certificate providers. Researchers at Comodo Antivirus / Comodo Antivirus Advanced and other products found in the...

PT-2019-13574

Name of the Vulnerable Software and Affected Versions Comodo Antivirus versions through 12.0.0.6870 Comodo Firewall versions through 12.0.0.6870 Comodo Internet Security Premium versions through 12.0.0.6870 Description The issue affects products with the Comodo Container feature, allowing for...

Comodo Antivirus / Internet Security Multiple Vulnerabilities

The version of the Comodo security product installed on the remote Windows host is affected by multiple vulnerabilities: - A Local Privilege Escalation due to CmdAgent's handling of COM clients. A local process can bypass the signature check enforced by CmdAgent via process hollowing which can th...

Comodo Security Solutions Antivirus Arbitrary File Write Vulnerability

Comodo Security Solutions Antivirus is a suite of antivirus software from the American company Comodo Security Solutions. The software is mainly used to protect against computer viruses, malware and other Internet threats. A security vulnerability exists in Comodo Security Solutions Antivirus...

Comodo Security Solutions Antivirus Out-of-Bounds Read Vulnerability

Comodo Security Solutions Antivirus is a suite of antivirus software from the American company Comodo Security Solutions. The software is mainly used to protect against computer viruses, malware and other Internet threats. A security vulnerability exists in Comodo Security Solutions Antivirus...

CVE-2019-3969

Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Local Privilege Escalation due to CmdAgent's handling of COM clients. A local process can bypass the signature check enforced by CmdAgent via process hollowing which can then allow the process to invoke sensitive COM methods in CmdAgen...

CVE-2019-3971

Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to a local Denial of Service affecting CmdVirth.exe via its LPC port "cmdvrtLPCServerPort". A low privileged local process can connect to this port and send an LPCDATAGRAM, which triggers an Access Violation due to hardcoded NULLs used fo...

CVE-2019-3970

Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Arbitrary File Write due to Cavwp.exe handling of Comodo's Antivirus database. Cavwp.exe loads Comodo antivirus definition database in unsecured global section objects, allowing a local low privileged process to modify this data direct...

CVE-2019-3972

Comodo Antivirus versions 12.0.0.6810 and below are vulnerable to Denial of Service affecting CmdAgent.exe via an unprotected section object "CisSharedMemBuff". This section object is exposed by CmdAgent and contains a SharedMemoryDictionary object, which allows a low privileged process to modify...

CVE-2019-3973

Comodo Antivirus versions 11.0.0.6582 and below are vulnerable to Denial of Service affecting CmdGuard.sys via its filter port "cmdServicePort". A low privileged process can crash CmdVirth.exe to decrease the port's connection count followed by process hollowing a CmdVirth.exe instance with...

CVE-2019-3970

Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Arbitrary File Write due to Cavwp.exe handling of Comodo's Antivirus database. Cavwp.exe loads Comodo antivirus definition database in unsecured global section objects, allowing a local low privileged process to modify this data direct...