CVE-2019-3972
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
Comodo Antivirus versions 12.0.0.6810 and below are vulnerable to Denial of Service affecting CmdAgent.exe via an unprotected section object "<GUID>_CisSharedMemBuff". This section object is exposed by CmdAgent and contains a SharedMemoryDictionary object, which allows a low privileged process to modify the object data causing CmdAgent.exe to crash.
Comodo Antivirus versiones 12.0.0.6810 y anteriores, son vulnerables a una Denegación de Servicio que afecta al archivo CmdAgent.exe por medio de un objeto de sección desprotegida de "(GUID)_CisSharedMemBuff". Este objeto de sección está expuesto mediante CmdAgent y contiene un objeto SharedMemoryDictionary, que permite que un proceso poco privilegiado modifique los datos del objeto que causan que el archivo CmdAgent.exe se bloquee.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2019-01-03 CVE Reserved
- 2019-07-17 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-04 CVE Updated
- 2024-08-04 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-125: Out-of-bounds Read
CAPEC
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|---|---|
https://www.tenable.com/security/research/tra-2019-34 | 2024-08-04 |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Comodo Search vendor "Comodo" | Antivirus Search vendor "Comodo" for product "Antivirus" | <= 12.0.0.6810 Search vendor "Comodo" for product "Antivirus" and version " <= 12.0.0.6810" | - |
Affected
|