CWE Code: 426
Vulnerability Type: privilege_escalation
CVSS Score: 4.4
CWE Name:  Untrusted Search Path
Summary: an issue was discovered in signmgr.dll 6.5.0.819 in comodo internet security through 12.0. a dll preloading vulnerability allows an attacker to implant an unsigned dll named ilog.dll in a partially unprotected product directory. this dll is then loaded into a high-privileged service before the binary signature validation logic is loaded, and might bypass some of the self-defense mechanisms.
Access Authentication: NONE
Access Complexity: UNKNOWN
Access Vector: UNKNOWN
Impact (C/I/A): NONE/NONE/NONE
Published Date: 2019-11-18
Last Modified Date: 2019-11-18