CVE-2019-14694

A use-after-free flaw in the sandbox container implemented in cmdguard.sys in Comodo Antivirus 12.0.0.6870 can be triggered due to a race condition when…

published August 28, 2019

CVSS
—
EPSS
0%
Percentile
33.8
In the wild
Unconfirmed
What it is

A use-after-free flaw in the sandbox container implemented in cmdguard.sys in Comodo Antivirus 12.0.0.6870 can be triggered due to a race condition when handling IRP_MJ_CLEANUP requests in the minifilter for directory change notifications. This allows an attacker to cause a denial of service (BSOD) when an executable is run inside the container.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00406 · 33.8th percentile
Published
2019-08-28T19:12Z
EPSS history
Timeline
  • 28 AUG 19:12Z
    A use-after-free flaw in the sandbox container implemented in cmdguard.sys in Comodo Antivirus 12.0.0.6870 can be triggered due to a race condition when…
    cvelistv5