Intrusion PreventionComodo.AntiVirus.ActiveX.ExecuteStr.Method.Access
Description
This indicates an attempt to exploit an arbitrary command execution vulnerability in Comodo Antivirus.
The vulnerability is caused by an input validation error in the "Cavutil.Utility.1" ActiveX control, in the "ExecuteStr()" method. It allows remote attackers to execute arbitrary commands by tricking a user into visiting a specially crafted web page.
Affected Products
Comodo AntiVirus 2.0
Impact
System Compromise: remote attackers can gain control of vulnerable systems.
Recommended Actions
Set the kill bit for CLSID "309F674D-E4D3-46BD-B9E2-ED7DFD7FD176".
Microsoft Knowledge Base Article details the "kill bit" mechanism.
http://support.microsoft.com/kb/240797
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2021-01-11 | 16.995 |
| ID | 15362 |
| Created | Jan 29, 2008 |
| Updated | Nov 09, 2021 |
| Risk |
|
| CVE ID | CVE-2008-0470 |
| Exploit Prediction Score | 2.78% |
| Default Action | pass |
| Active | |
| Affected OS | Windows |
| Affected App | Other |