CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 2.1
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: comodo antivirus versions up to 12.0.0.6810 are vulnerable to a local denial of service affecting cmdvirth.exe via its lpc port "cmdvrtlpcserverport". a low privileged local process can connect to this port and send an lpc_datagram, which triggers an access violation due to hardcoded nulls used for source parameter in a memcpy operation that is called for this handler. this results in cmdvirth.exe and its child svchost.exe instances to terminate.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): NONE/NONE/PARTIAL
Published Date: 2019-07-17
Last Modified Date: 2019-07-23