PT-2008-2102 · Comodo · Comodo Antivirus

H07 + 1 · Publicado 2008-01-29 · Atualizado 2017-09-29 · CVE-2008-0470

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Comodo AntiVirus version 2.0

Description The issue concerns a certain ActiveX control that allows remote attackers to execute arbitrary commands. This is achieved via the ExecuteStr method, which is vulnerable to exploitation.

Recommendations For Comodo AntiVirus version 2.0, consider disabling the vulnerable ActiveX control as a temporary workaround until a patch is available. Restrict access to the ExecuteStr method to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2008-0470

Produtos afetados

Comodo Antivirus

Referências · 4

• 🔥 http://securityfocus.com/bid/27424 · Exploit
• 🔥 https://exploit-db.com/exploits/4974 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39904 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-0470 · Nota de Segurança