VNC Server Exposure in Comodo GeekBuddy Allows Unauthorized Privilege Escalation
CVE-2014-7872
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2014-7872?
The vulnerability in Comodo GeekBuddy prior to version 4.18.121 stems from improper access restrictions to its VNC server. This flaw allows local users to connect to the VNC server without adequate permissions, facilitating unauthorized privilege escalation. Attackers may exploit this loophole to manipulate system functions, posing a significant risk to user security.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.