922 matches found
CVE-2019-3969: Undefined Security Weakness
Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Local Privilege Escalation due to CmdAgent's handling of COM clients. A local process can bypass the signature check enforced by CmdAgent via process hollowing which can then allow the process to invoke sensitive COM methods in CmdAgen...
PT-2019-16819
Name of the Vulnerable Software and Affected Versions Comodo Antivirus versions up to 12.0.0.6810 Description The issue arises from the handling of Comodo's Antivirus database by Cavwp.exe, which loads the Comodo antivirus definition database into unsecured global section objects. This allows a...
CVE-2019-3969: Comodo Antivirus Privilege Escalation
Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Local Privilege Escalation due to CmdAgent’s handling of COM clients. A local process can bypass the signature check enforced by CmdAgent via process hollowing which can then allow the process to invoke sensitive COM methods in CmdAgen...
Comodo Security Comodo Security Solutions Antivirus Buffer Overflow Vulnerability
Comodo Security Solutions Antivirus is a suite of antivirus software from the American company Comodo Security Solutions. The software is mainly used to protect against computer viruses, malware and other Internet threats. A buffer overflow vulnerability exists in Comodo Security Solutions...
CVE-2019-3970: Exposure of Resource to Wrong Sphere
Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Arbitrary File Write due to Cavwp.exe handling of Comodo's Antivirus database. Cavwp.exe loads Comodo antivirus definition database in unsecured global section objects, allowing a local low privileged process to modify this data direct...
CVE-2019-3973: Out-of-bounds Write
Comodo Antivirus versions 11.0.0.6582 and below are vulnerable to Denial of Service affecting CmdGuard.sys via its filter port "cmdServicePort". A low privileged process can crash CmdVirth.exe to decrease the port's connection count followed by process hollowing a CmdVirth.exe instance with...
PT-2019-16821
Name of the Vulnerable Software and Affected Versions Comodo Antivirus versions 12.0.0.6810 and below Description The issue affects the CmdAgent.exe component through an unprotected section object, allowing a low-privileged process to modify the object data and cause the application to crash. Thi...
CVE-2019-3971: Undefined Security Weakness
Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to a local Denial of Service affecting CmdVirth.exe via its LPC port "cmdvrtLPCServerPort". A low privileged local process can connect to this port and send an LPCDATAGRAM, which triggers an Access Violation due to hardcoded NULLs used fo...
PT-2019-16822
Name of the Vulnerable Software and Affected Versions Comodo Antivirus versions 11.0.0.6582 and below Description The issue allows a low-privileged process to crash CmdVirth.exe, decreasing the connection count of the cmdServicePort. An attacker can then use process hollowing to obtain a handle t...
PT-2019-16820
Name of the Vulnerable Software and Affected Versions Comodo Antivirus versions up to 12.0.0.6810 Description The issue is a local Denial of Service that affects CmdVirth.exe via its LPC port "cmdvrtLPCServerPort". A low-privileged local process can connect to this port and send an LPC DATAGRAM,...
PT-2019-16818
Name of the Vulnerable Software and Affected Versions Comodo Antivirus versions up to 12.0.0.6810 Description The issue allows a local process to bypass the signature check enforced by CmdAgent via process hollowing, enabling the process to invoke sensitive COM methods in CmdAgent, such as writin...
WAFW00F v1.0.0 - Detect All The Web Application Firewall!
WAFW00F identifies and fingerprints Web Application Firewall WAF products. How does it work? To do its magic, WAFW00F does the following: Sends a normal HTTP request and analyses the response; this identifies a number of WAF solutions. If that is not successful, it sends a number of potentially...
Comodo Dome Firewall 2.7.0 Cross Site Scripting
Exploit Title: Comodo Dome Firewall 2.7.0 | Cross-Site Scripting Date: 18.02.2019 Exploit Author: Ozer Goker Vendor Homepage: https://cdome.comodo.com/firewall/ Software Link: https://secure.comodo.com/home/purchase.php?pid=106&license=try&track=9278&af=9278 Version: 2.7.0 Introduction Comodo Dom...
Comodo Dome Firewall 2.7.0 - Cross-Site Scripting
Comodo Dome Firewall 2.7.0 - Cross-Site Scripting Exploit Title: Comodo Dome Firewall 2.7.0 | Cross-Site Scripting Date: 18.02.2019 Exploit Author: Ozer Goker Vendor Homepage: https://cdome.comodo.com/firewall/ Software Link:...
Comodo Dome Firewall 2.7.0 - Cross-Site Scripting Vulnerability
Exploit for multiple platform in category web applications Exploit Title: Comodo Dome Firewall 2.7.0 | Cross-Site Scripting Exploit Author: Ozer Goker Vendor Homepage: https://cdome.comodo.com/firewall/ Software Link:...
Comodo Dome Firewall 2.7.0 - Cross-Site Scripting
Exploit Title: Comodo Dome Firewall 2.7.0 | Cross-Site Scripting Date: 18.02.2019 Exploit Author: Ozer Goker Vendor Homepage: https://cdome.comodo.com/firewall/ Software Link: https://secure.comodo.com/home/purchase.php?pid=106&license=try&track=9278&af=9278 Version: 2.7.0 Introduction Comodo Dom...
CVE-2018-17431
Web Console in Comodo UTM Firewall before 2.7.0 allows remote attackers to execute arbitrary code without authentication via a crafted URL...
CVE-2018-17431
Web Console in Comodo UTM Firewall before 2.7.0 allows remote attackers to execute arbitrary code without authentication via a crafted URL...
