Arbitrary File Write Vulnerability in Comodo Antivirus
CVE-2019-3970

5.5MEDIUM

Key Information:

Vendor

Comodo

Status
Comodo Antivirus
Vendor
CVE Published:
17 July 2019

What is CVE-2019-3970?

Comodo Antivirus versions up to 12.0.0.6810 are impacted by an Arbitrary File Write vulnerability. The issue stems from the handling of Comodo's Antivirus database by the Cavwp.exe process, which loads antivirus definition databases in unsecured global section objects. This flaw can allow a local low-privileged user to modify the antivirus data directly, potentially altering virus signatures and compromising the integrity of the security software.

Affected Version(s)

Comodo Antivirus Versions 12.0.0.6810 and below

References

https://www.tenable.com/security/research/tra-2019-34
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.