CVE-2014-7872 – Comodo GeekBuddy < 4.18.121 - Local Privilege Escalation

https://notcve.org/view.php?id=CVE-2014-7872

09 Jun 2015 — Comodo GeekBuddy before 4.18.121 does not restrict access to the VNC server, which allows local users to gain privileges by connecting to the server. Comodo GeekBuddy anterior a 4.18.121 no restringe el acceso al servidor VNC, lo que permite a usuarios locales ganar privilegios mediante la conexión al servidor. Comodo Internet Security installs GeekBuddy which installs a weakly secure exposed VNC server. • https://packetstorm.news/files/id/135841 • CWE-264: Permissions, Privileges, and Access Controls •