提出 #603716: Comodo Security Solutions Comodo Internet Security Premium 12.3.4.8162 Path Traversal情報

タイトルComodo Security Solutions Comodo Internet Security Premium 12.3.4.8162 Path Traversal
説明Comodo IS has tag copy that uses value in section folder as installation destination without any sanitize or validation. Threat actor can craft path traversal payload in manifest file, write malicious file in startup directory. Threat actor gains remote system control after victim reboot.
ソース⚠️ https://drive.google.com/file/d/1qnWarYsTSc5_sV6o8ULv0LBvGfKKXPxn/view?usp=sharing
ユーザー
 FPT IS Security (UID 72751)
送信2025年06月25日 10:47 (10 月 ago)
モデレーション2025年07月05日 17:36 (10 days later)
ステータス重複
VulDBエントリ315012 [Comodo Internet Security Premium 12.3.4.8162 File Name name/folder ディレクトリトラバーサル]
ポイント0

Do you want to use VulDB in your project?

Use the official API to access entries easily!