Privilege Escalation Vulnerability in Comodo Antivirus

CVE-2022-34008

What is CVE-2022-34008?

Comodo Antivirus version 12.2.2.8012 contains a vulnerability that allows low-privileged attackers to exploit a flaw in the quarantine feature. By using an NTFS directory junction, an attacker can restore a malicious DLL file from quarantine into the System32 folder. This action opens the door for further attempts at privilege escalation, which can compromise the security of the system.

References