CWE Code: 20
Vulnerability Type: privilege_escalation
CVSS Score: 2.1
CWE Name:  Improper Input Validation
Summary: comodo antivirus versions up to 12.0.0.6810 are vulnerable to arbitrary file write due to cavwp.exe handling of comodo's antivirus database. cavwp.exe loads comodo antivirus definition database in unsecured global section objects, allowing a local low privileged process to modify this data directly and change virus signatures.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): NONE/PARTIAL/NONE
Published Date: 2019-07-17
Last Modified Date: 2019-07-23