Path traversal in Comodo Internet Security - #VU95553

 

Path traversal in Comodo Internet Security - #VU95553

Published: August 8, 2024


Vulnerability identifier: #VU95553
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-22
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to input validation error within the update mechanism. A local user can execute arbitrary code with elevated privileges.


Affected software

Comodo Internet Security

Remediation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.


External References

Related Security Bulletins