إرسال #603713: Comodo Security Solutions Comodo Internet Security Premium 12.3.4.8162 Improper Validation of Integrity Check Valueالمعلومات

عنوانComodo Security Solutions Comodo Internet Security Premium 12.3.4.8162 Improper Validation of Integrity Check Value
الوصفComodo update server uses manifest file cis_update_x64.xml to define metadata of binaries to update. Comodo IS doesn't verify authenticity and integrity of this manifest file. Threat actor can deliver malicious script and executes to gain remote control as SYSTEM privilege.
المصدر⚠️ https://drive.google.com/file/d/1qnWarYsTSc5_sV6o8ULv0LBvGfKKXPxn/view?usp=sharing
المستخدم
 FPT IS Security (UID 72751)
ارسال25/06/2025 10:42 AM (1 سنة منذ)
الاعتدال05/07/2025 05:36 PM (10 days later)
الحالةتمت الموافقة
إدخال VulDB315010 [Comodo Internet Security Premium 12.3.4.8162 Manifest File cis_update_x64.xml تنفيذ التعليمات البرمجية عن بُعد]
النقاط18

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!