The version of the Comodo security product installed on the remote Windows host is affected by multiple vulnerabilities:

  - A Local Privilege Escalation due to CmdAgent's handling     of COM clients. A local process can bypass the signature     check enforced by CmdAgent via process hollowing which     can then allow the process to invoke sensitive COM     methods in CmdAgent such as writing to the registry with     SYSTEM privileges.(CVE-2019-3969)

  - An Arbitrary File Write due to Cavwp.exe handling of     Comodo's Antivirus database. Cavwp.exe loads Comodo     antivirus definition database in unsecured global     section objects, allowing a local low privileged process     to modify this data directly and change virus     signatures. (CVE-2019-3970)

  - A local Denial of Service affecting CmdVirth.exe via its     LPC port cmdvrtLPCServerPort. A low privileged local     process can connect to this port and send an     LPC_DATAGRAM, which triggers an Access Violation due to     hardcoded NULLs used for Source parameter in a memcpy     operation that is called for this handler. This results     in CmdVirth.exe and its child svchost.exe instances to     terminate. (CVE-2019-3971)

  - A Denial of Service affecting CmdAgent.exe via an     unprotected section object <GUID>_CisSharedMemBuff. This     section object is exposed by CmdAgent and contains a     SharedMemoryDictionary object, which allows a low     privileged process to modify the object data causing     CmdAgent.exe to crash. (CVE-2019-3972)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

远程 Windows 主机上安装的 Comodo 安全产品版本受到多个漏洞影响：- COM 客户端的 CmdAgent 处理导致本地权限升级。本地进程可以通过进程替换绕过 CmdAgent 强制执行的签名检查，随后可以允许进程在 CmdAgent 中调用敏感 COM 方法，例如：写入具备系统权限的注册表。 (CVE-2019-3969) - 处理 Comodo 防病毒数据的 Cavwp.exe 导致任意文件写入。Cavwp.exe 在不安全的全局区域对象中加载 Comodo 防病毒定义数据库，允许本地低权限进程直接修改此数据和变更病毒签名。(CVE-2019-3970) - 通过其 LPC 端口 cmdvrtLPCServerPort 影响 CmdVirth.exe 的本地拒绝服务。低权限本地进程可以连接该端口并发送 LPC_DATAGRAM，导致在为该处理调用的 memcpy 操作中，源参数使用的硬编码 NULL 触发访问冲突。这会导致 CmdVirth.exe 及其子 svchost.exe 实例终止。(CVE-2019-3971) - 通过未受保护的区域对象 <GUID>_CisSharedMemBuff 影响 CmdAgent.exe 的拒绝服务。该区域对象由 CmdAgent 暴露，其中包含 SharedMemoryDictionary 对象，允许低权限进程修改对象数据，造成 CmdAgent.exe 崩溃。(CVE-2019-3972) 请注意，Nessus 没有测试此问题，而仅依赖于应用程序自我报告的版本号。

遠端 Windows 主機上安裝的 Comodo 安全性產品版本受到多個弱點影響：- 因 CmdAgent 處理 COM 用戶端的方式所致的本機權限提升。本機處理程序可透過處理程序空白繞過 CmdAgent 實施的簽名檢查機制，然後讓處理程序得以在 CmdAgent 中叫用敏感的 COM 方法，如以 SYSTEM 權限寫入登錄檔。(CVE-2019-3969) - 因 Cavwp.exe 處理 Comodo 防毒資料庫的方式所致的任意檔案寫入。Cavwp.exe 在不安全的全域區段物件中載入 Comodo 防毒定義資料庫，本機低權限處理程序因而得以直接修改此資料，並變更病毒簽名。(CVE-2019-3970) - 影響 CmdVirth.exe (透過其 LPC 連接埠 cmdvrtLPCServerPort) 的本機拒絕服務。低權限本機處理程序可連線至此連接埠，並傳送 LPC_DATAGRAM，進而觸發存取違規，這是因為在針對此處理常式呼叫的 memcpy 作業中，用於 Source 參數的硬式編碼 Null 所導致。這導致 CmdVirth.exe 及其子項 svchost.exe 執行個體終止。(CVE-2019-3971) - 透過不受保護的區段物件 <GUID>_CisSharedMemBuff 影響 CmdAgent.exe 的拒絕服務。此區段物件由 CmdAgent 揭露，且含有 SharedMemoryDictionary 物件，低權限處理程序因而得以修改造成 CmdAgent.exe 損毀的物件資料。(CVE-2019-3972) 請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

The version of the Comodo security product installed on the remote Windows host is affected by multiple vulnerabilities:

  - A Local Privilege Escalation due to CmdAgent's handling of COM clients. A local process can bypass the signature check enforced by CmdAgent via process hollowing which can then allow the process to invoke sensitive COM methods in CmdAgent such as writing to the registry with SYSTEM privileges.(CVE-2019-3969)

  - An Arbitrary File Write due to Cavwp.exe handling of Comodo's Antivirus database. Cavwp.exe loads Comodo antivirus definition database in unsecured global section objects, allowing a local low privileged process to modify this data directly and change virus signatures. (CVE-2019-3970)

  - A local Denial of Service affecting CmdVirth.exe via its LPC port cmdvrtLPCServerPort. 権限の低いローカルプロセスがこのポートに接続してLPC_DATAGRAMを送信すると、このハンドラーに対して呼び出されるmemcpy操作のSourceパラメーターにハードコーディングされたNULLが使用されるため、アクセス違反がトリガーされます。This results in CmdVirth.exe and its child svchost.exe instances to terminate. (CVE-2019-3971)

  - A Denial of Service affecting CmdAgent.exe via an unprotected section object <GUID>_CisSharedMemBuff. This section object is exposed by CmdAgent and contains a SharedMemoryDictionary object, which allows a low privileged process to modify the object data causing CmdAgent.exe to crash. (CVE-2019-3972)

Nessus はこの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

ID	名稱	產品	系列	已發布	已更新	嚴重性
126953	Comodo Antivirus / Internet Security Multiple Vulnerabilities	Nessus	Windows	2019/7/23	2024/5/8	high
126953	Comodo 防病毒/网络安全多个漏洞	Nessus	Windows	2019/7/23	2024/5/8	high
126953	Comodo Antivirus / Internet Security 多個弱點	Nessus	Windows	2019/7/23	2024/5/8	high
126953	Comodo Antivirus/Internet Securityの複数の脆弱性	Nessus	Windows	2019/7/23	2024/5/8	high

偵測

搜尋 Plugin

high

high

high

high