// For flags

CVE-2019-3971

 

Severity Score

5.5
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to a local Denial of Service affecting CmdVirth.exe via its LPC port "cmdvrtLPCServerPort". A low privileged local process can connect to this port and send an LPC_DATAGRAM, which triggers an Access Violation due to hardcoded NULLs used for Source parameter in a memcpy operation that is called for this handler. This results in CmdVirth.exe and its child svchost.exe instances to terminate.

Comodo Antivirus versiones hasta la 12.0.0.6810 y anteriores, son vulnerables a una Denegación de Servicio local que afecta al archivo CmdVirth.exe por medio de su puerto LPC "cmdvrtLPCServerPort". Un proceso local poco privilegiado puede conectarse a este puerto y enviar un LPC_DATAGRAM, que activa una Violación de Acceso debido a NULLs embebidos en el disco duro utilizados por el parámetro Source en una operación memcpy que es llamada por este controlador. Esto resulta en finalicen las instancias del archivo CmdVirth.exe y su secundario svchost.exe.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Local
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2019-01-03 CVE Reserved
  • 2019-07-17 CVE Published
  • 2023-03-08 EPSS Updated
  • 2024-08-04 CVE Updated
  • 2024-08-04 First Exploit
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
CAPEC
References (1)
URL Tag Source
URL Date SRC
https://www.tenable.com/security/research/tra-2019-34 2024-08-04
URL Date SRC
URL Date SRC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Comodo
Search vendor "Comodo"
 Antivirus
Search vendor "Comodo" for product "Antivirus"
 <= 12.0.0.6810
Search vendor "Comodo" for product "Antivirus" and version " <= 12.0.0.6810"
-
Affected