Back to search
CVE-2019-3971
Published: Jul 17, 2019
Modified: Aug 4, 2024
PUBLISHED
Description
Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to a local Denial of Service affecting CmdVirth.exe via its LPC port "cmdvrtLPCServerPort". A low privileged local process can connect to this port and send an LPC_DATAGRAM, which triggers an Access Violation due to hardcoded NULLs used for Source parameter in a memcpy operation that is called for this handler. This results in CmdVirth.exe and its child svchost.exe instances to terminate.
| Vendor | Product | Versions |
|---|---|---|
n/a | Comodo Antivirus | affected Versions 12.0.0.6810 and below |
References
https://www.tenable.com/security/research/tra-2019-34
x_refsource_MISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now