CVE-2019-3970

Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Arbitrary File Write due to Cavwp.exe handling of Comodo's Antivirus database. Cavwp.exe loads Comodo antivirus definition database in unsecured global section objects, allowing a local low privileged process to modify this data directly and change virus signatures.
References
Link Resource
https://www.tenable.com/security/research/tra-2019-34 Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:comodo:antivirus:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2019-07-17 21:15

Updated : 2024-02-04 20:20


NVD link : CVE-2019-3970

Mitre link : CVE-2019-3970

CVE.ORG link : CVE-2019-3970


JSON object : View

Products Affected

comodo

  • antivirus
CWE
CWE-668

Exposure of Resource to Wrong Sphere