| शीर्षक | Comodo Security Solutions Comodo Internet Security Premium 12 Path Traversal |
|---|
| विवरण | Comodo IS uses value in section name as download file name without any sanitize or validation. Threat actor can craft path traversal payload in manifest file, writes malicious file inside startup folder. The threat actor can remotely control the victim's machine after a reboot. Even though untrusted file runs under Comodo isolation, threat actor can use post-exploit modules like bypass UAC to get SYSTEM privilege, and hashdump or mimikatz to gather system's credentials. |
|---|
| स्रोत | ⚠️ https://drive.google.com/file/d/1qnWarYsTSc5_sV6o8ULv0LBvGfKKXPxn/view?usp=sharing |
|---|
| उपयोगकर्ता | FPT IS Security (UID 72751) |
|---|
| सबमिशन | 25/06/2025 10:45 AM (1 वर्ष पहले) |
|---|
| संयम | 05/07/2025 05:36 PM (10 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 315012 [Comodo Internet Security Premium 12.3.4.8162 File Name name/folder निर्देशिका ट्रैवर्सल] |
|---|
| अंक | 20 |
|---|