Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9vjx-8m86-3rhw

Опубликовано: 07 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 8.2
CVSS3: 8.1

Описание

A vulnerability classified as critical was found in Comodo Internet Security Premium 12.3.4.8162. This vulnerability affects unknown code of the file cis_update_x64.xml of the component Manifest File Handler. The manipulation leads to improper validation of integrity check value. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability classified as critical was found in Comodo Internet Security Premium 12.3.4.8162. This vulnerability affects unknown code of the file cis_update_x64.xml of the component Manifest File Handler. The manipulation leads to improper validation of integrity check value. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

EPSS

Процентиль: 29%
0.00104
Низкий

8.2 High

CVSS4

8.1 High

CVSS3

Дефекты

CWE-345
CWE-354

Связанные уязвимости

CVSS3: 8.1
nvd
7 месяцев назад

A vulnerability classified as critical was found in Comodo Internet Security Premium 12.3.4.8162. This vulnerability affects unknown code of the file cis_update_x64.xml of the component Manifest File Handler. The manipulation leads to improper validation of integrity check value. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS3: 8.8
fstec
8 месяцев назад

Уязвимость антивирусного программного средства Comodo Internet Security Premium, связанная с отсутствием проверки целостности, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 29%
0.00104
Низкий

8.2 High

CVSS4

8.1 High

CVSS3

Дефекты

CWE-345
CWE-354