PT-2008-2102 · Comodo · Comodo Antivirus

H07 + 1 · Published 2008-01-29 · Updated 2017-09-29 · CVE-2008-0470

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Comodo AntiVirus version 2.0

Description The issue concerns a certain ActiveX control that allows remote attackers to execute arbitrary commands. This is achieved via the ExecuteStr method, which is vulnerable to exploitation.

Recommendations For Comodo AntiVirus version 2.0, consider disabling the vulnerable ActiveX control as a temporary workaround until a patch is available. Restrict access to the ExecuteStr method to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2008-0470

Affected Products

Comodo Antivirus

References · 4

• 🔥 http://securityfocus.com/bid/27424 · Exploit
• 🔥 https://exploit-db.com/exploits/4974 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-0470 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39904 · Note