DLL Preloading Vulnerability in Comodo Internet Security

CVE-2019-18215

What is CVE-2019-18215?

A vulnerability exists in the signmgr.dll component of Comodo Internet Security, allowing attackers to exploit DLL Preloading techniques. By placing an unsigned DLL (iLog.dll) in a partially protected directory, an attacker can trick the software into loading this malicious DLL into a high-privileged service before the application verifies its digital signature, potentially bypassing critical self-defense mechanisms designed to protect the system.

References