CVE-2019-3970

Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Arbitrary File Write due to Cavwp.exe handling of Comodo's Antivirus database

published July 17, 2019

CVSS
—
EPSS
0%
Percentile
33.3
In the wild
Unconfirmed
What it is

Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Arbitrary File Write due to Cavwp.exe handling of Comodo's Antivirus database. Cavwp.exe loads Comodo antivirus definition database in unsecured global section objects, allowing a local low privileged process to modify this data directly and change virus signatures.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00402 · 33.3th percentile
Published
2019-07-17T20:34Z
EPSS history
Timeline
  • 17 JUL 20:34Z
    Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Arbitrary File Write due to Cavwp.exe handling of Comodo's Antivirus database
    cvelistv5