CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1CVE-2019-18215
https://notcve.org/view.php?id=CVE-2019-18215
18 Nov 2019 — An issue was discovered in signmgr.dll 6.5.0.819 in Comodo Internet Security through 12.0. A DLL Preloading vulnerability allows an attacker to implant an unsigned DLL named iLog.dll in a partially unprotected product directory. This DLL is then loaded into a high-privileged service before the binary signature validation logic is loaded, and might bypass some of the self-defense mechanisms. Se detectó un problema en la biblioteca signmgr.dll versión 6.5.0.819 en Comodo Internet Security versiones hasta 12.0... • https://forums.comodo.com/news-announcements-feedback-cis/comodo-internet-security-2019-v12106914-released-t124993.0.html • CWE-427: Uncontrolled Search Path Element •
CVSS: 5.5EPSS: 0%CPEs: 40EXPL: 1CVE-2012-2273
https://notcve.org/view.php?id=CVE-2012-2273
20 Apr 2012 — Comodo Internet Security before 5.10.228257.2253 on Windows 7 x64 allows local users to cause a denial of service (system crash) via a crafted 32-bit Portable Executable (PE) file with a kernel ImageBase value. Comodo Internet Security antes de v5.10.228257.2253 en Windows 7 para la plataforma x64 permite a usuarios locales provocar una denegación de servicio (por caída del sistema) a través de un fichero Portable Executable (PE) de 32-bits específicamente modificado para este fin con el valor 'kernel' en I... • http://archives.neohapsis.com/archives/bugtraq/2012-04/0139.html • CWE-94: Improper Control of Generation of Code ('Code Injection') •