CWE Code: 125
Vulnerability Type: privilege_escalation
CVSS Score: 2.1
CWE Name:  Out-of-bounds Read
Summary: comodo antivirus versions 12.0.0.6810 and below are vulnerable to denial of service affecting cmdagent.exe via an unprotected section object "<guid>_cissharedmembuff". this section object is exposed by cmdagent and contains a sharedmemorydictionary object, which allows a low privileged process to modify the object data causing cmdagent.exe to crash.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): NONE/NONE/PARTIAL
Published Date: 2019-07-17
Last Modified Date: 2019-07-23