Submit #603716: Comodo Security Solutions Comodo Internet Security Premium 12.3.4.8162 Path Traversalinfo

TitleComodo Security Solutions Comodo Internet Security Premium 12.3.4.8162 Path Traversal
DescriptionComodo IS has tag copy that uses value in section folder as installation destination without any sanitize or validation. Threat actor can craft path traversal payload in manifest file, write malicious file in startup directory. Threat actor gains remote system control after victim reboot.
Source⚠️ https://drive.google.com/file/d/1qnWarYsTSc5_sV6o8ULv0LBvGfKKXPxn/view?usp=sharing
User
 FPT IS Security (UID 72751)
Submission06/25/2025 10:47 (10 months ago)
Moderation07/05/2025 17:36 (10 days later)
StatusDuplicate
VulDB entry315012 [Comodo Internet Security Premium 12.3.4.8162 File Name name/folder path traversal]
Points0

Interested in the pricing of exploits?

See the underground prices here!