RCE in Comodo Internet Security
CVE-2012-2273
Comodo Internet Security before 5.10.228257.2253 on Windows 7 x64 allows local users to cause a denial of service (system crash) via a crafted 32-bit Portable Executable (PE) file with a kernel ImageBase value.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.005 (39.6th percentile) — read the EPSS interpretation.
Affected products
- Comodo Comodo_internet_security — versions 3.0.14.276, 3.0.15.277, 3.0.16.295
- Microsoft Windows_7
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (mailing-list, Exploit, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)