Comodo Internet Security

An issue was discovered in signmgr.dll 6.5.0.819 in Comodo Internet Security through 12.0. A DLL Preloading vulnerability allows an attacker to implant an unsigned DLL named iLog.dll in a partially unprotected product directory. This DLL is then loaded into a high-privileged service before the binary signature validation logic is loaded, and might bypass some of the self-defense mechanisms.

Published: 2019-11-18T20:00:48.000Z
Updated: 2024-08-05T01:47:14.105Z

Comodo Internet Security before 5.10.228257.2253 on Windows 7 x64 allows local users to cause a denial of service (system crash) via a crafted 32-bit Portable Executable (PE) file with a kernel ImageBase value.

Published: 2012-04-20T01:00:00.000Z
Updated: 2024-08-06T19:26:09.012Z

The Antivirus component in Comodo Internet Security before 5.3.175888.1227 does not check whether X.509 certificates in signed executable files have been revoked, which has unknown impact and remote attack vectors.

Published: 2012-08-26T01:00:00.000Z
Updated: 2024-09-17T02:47:22.893Z

The Antivirus component in Comodo Internet Security before 5.3.175888.1227 allows remote attackers to cause a denial of service (application crash) via a crafted compressed file.

Published: 2012-08-26T01:00:00.000Z
Updated: 2024-09-17T00:46:17.731Z

The Antivirus component in Comodo Internet Security before 5.3.175888.1227 does not properly check whether unspecified X.509 certificates are revoked, which has unknown impact and remote attack vectors.

Published: 2012-08-26T01:00:00.000Z
Updated: 2024-09-17T01:36:06.256Z

Multiple race conditions in Comodo Internet Security before 5.8.211697.2124 allow local users to bypass the Defense+ feature via unspecified vectors.

Published: 2012-08-26T01:00:00.000Z
Updated: 2024-09-16T22:45:12.173Z

Multiple race conditions in Comodo Internet Security before 5.8.213334.2131 allow local users to bypass the Defense+ feature via unspecified vectors.

Published: 2012-08-26T01:00:00.000Z
Updated: 2024-09-17T01:45:37.762Z

The Antivirus component in Comodo Internet Security before 4.1.150349.920 allows remote attackers to cause a denial of service (application crash) via a crafted file.

Published: 2012-08-26T01:00:00.000Z
Updated: 2024-09-16T16:32:52.595Z

The Antivirus component in Comodo Internet Security before 5.3.174622.1216 does not check whether X.509 certificates in signed executable files have been revoked, which has unknown impact and remote attack vectors.

Published: 2012-08-26T01:00:00.000Z
Updated: 2024-09-16T16:53:13.278Z

Race condition in Comodo Internet Security before 4.1.149672.916 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution, aka an argument-switch attack or a KHOBE attack.

Published: 2012-08-25T21:00:00.000Z
Updated: 2024-09-17T03:55:02.968Z

The Antivirus component in Comodo Internet Security before 3.8.64739.471 allows remote attackers to cause a denial of service (application crash) via a crafted file.

Published: 2012-08-26T01:00:00.000Z
Updated: 2024-09-17T03:38:21.459Z

The Antivirus component in Comodo Internet Security before 3.8.65951.477 allows remote attackers to cause a denial of service (application crash) via a crafted file.

Published: 2012-08-26T01:00:00.000Z
Updated: 2024-09-16T17:18:01.901Z

Comodo Internet Security before 3.9.95478.509 allows remote attackers to bypass malware detection in an RAR archive via an unspecified manipulation of the archive file format.

Published: 2012-08-26T01:00:00.000Z
Updated: 2024-09-16T20:41:55.140Z

The Antivirus component in Comodo Internet Security before 3.11.108364.552 allows remote attackers to cause a denial of service (application crash) via a crafted packed file.

Published: 2012-08-26T01:00:00.000Z
Updated: 2024-09-17T02:21:07.449Z

The Antivirus component in Comodo Internet Security before 3.11.108364.552 allows remote attackers to cause a denial of service (memory consumption) via a crafted compressed file.

Published: 2012-08-26T01:00:00.000Z
Updated: 2024-09-16T16:32:45.660Z