| Name | Comodo.AntiVirus.ActiveX.ExecuteStr.Method.Access |
| Release Date | Jan 29, 2008 |
| Severity | High |
| Impact | System Compromise: remote attackers can gain control of vulnerable systems. |
| Description | This indicates an attempt to exploit an arbitrary command execution vulnerability in Comodo Antivirus.
The vulnerability is caused by an input validation error in the "Cavutil.Utility.1" ActiveX control, in the "ExecuteStr()" method. It allows remote attackers to execute arbitrary commands by tricking a user into visiting a specially crafted web page. |
| Affected Products | Comodo AntiVirus 2.0 |
| Recommended Actions | Set the kill bit for CLSID "309F674D-E4D3-46BD-B9E2-ED7DFD7FD176".
Microsoft Knowledge Base Article details the "kill bit" mechanism.
http://support.microsoft.com/kb/240797 |
| Common Vulnerabilities and Exposures (CVE) | http://cve.mitre.org/cgi-bin/cvename.cgi?name=2008-0470
|
| Reference/s | http://www.securityfocus.com/bid/27424 (BugTraq)
http://milw0rm.com/exploits/4974
|