| 标题 | Comodo Security Solutions Comodo Internet Security Premium 12.3.4.8162 Path Traversal |
|---|
| 描述 | Comodo IS has tag copy that uses value in section folder as installation destination without any sanitize or validation. Threat actor can craft path traversal payload in manifest file, write malicious file in startup directory. Threat actor gains remote system control after victim reboot.
|
|---|
| 来源 | ⚠️ https://drive.google.com/file/d/1qnWarYsTSc5_sV6o8ULv0LBvGfKKXPxn/view?usp=sharing |
|---|
| 用户 | FPT IS Security (UID 72751) |
|---|
| 提交 | 2025-06-25 10時47分 (1 年前) |
|---|
| 管理 | 2025-07-05 17時36分 (10 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 315012 [Comodo Internet Security Premium 12.3.4.8162 File Name name/folder 目录遍历] |
|---|
| 积分 | 0 |
|---|