Comodo Internet Security vulnerabilities
16 vulnerabilities
Known vulnerabilities in Comodo Internet Security, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2012-2273comodocomodo_internet_security
EPSS score0.50%
Comodo Internet Security before 5.10.228257.2253 on Windows 7 x64 allows local users to cause a denial of service (system crash) via a crafted 32-bit Portable Executable (PE) file with a kernel ImageBase value.CVE-2011-5121comodocomodo_internet_securityEPSS score1.22%
The Antivirus component in Comodo Internet Security before 5.3.175888.1227 does not properly check whether unspecified X.509 certificates are revoked, which has unknown impact and remote attack vectors.CVE-2011-5120comodocomodo_internet_securityEPSS score2.22%
The Antivirus component in Comodo Internet Security before 5.4.189822.1355 allows remote attackers to cause a denial of service (application crash) via a crafted .PST file.CVE-2011-5123comodocomodo_internet_securityEPSS score1.22%
The Antivirus component in Comodo Internet Security before 5.3.175888.1227 does not check whether X.509 certificates in signed executable files have been revoked, which has unknown impact and remote attack vectors.CVE-2011-5118comodocomodo_internet_securityEPSS score0.40%
Multiple race conditions in Comodo Internet Security before 5.8.213334.2131 allow local users to bypass the Defense+ feature via unspecified vectors.CVE-2011-5119comodocomodo_internet_securityEPSS score0.40%
Multiple race conditions in Comodo Internet Security before 5.8.211697.2124 allow local users to bypass the Defense+ feature via unspecified vectors.CVE-2011-5122comodocomodo_internet_securityEPSS score2.22%
The Antivirus component in Comodo Internet Security before 5.3.175888.1227 allows remote attackers to cause a denial of service (application crash) via a crafted compressed file.CVE-2010-5186comodocomodo_internet_securityEPSS score2.22%
The Antivirus component in Comodo Internet Security before 4.1.150349.920 allows remote attackers to cause a denial of service (application crash) via a crafted file.CVE-2010-5157comodocomodo_internet_securityEPSS score0.39%
Race condition in Comodo Internet Security before 4.1.149672.916 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution, aka an argument-switch attack or a KHOBE attack.CVE-2010-5185comodocomodo_internet_securityEPSS score1.22%
The Antivirus component in Comodo Internet Security before 5.3.174622.1216 does not check whether X.509 certificates in signed executable files have been revoked, which has unknown impact and remote attack vectors.CVE-2009-5126comodocomodo_internet_securityEPSS score2.22%
The Antivirus component in Comodo Internet Security before 3.8.65951.477 allows remote attackers to cause a denial of service (application crash) via a crafted file.CVE-2009-5127comodocomodo_internet_securityEPSS score2.22%
The Antivirus component in Comodo Internet Security before 3.8.64739.471 allows remote attackers to cause a denial of service (application crash) via a crafted file.CVE-2009-5123comodocomodo_internet_securityEPSS score2.22%
The Antivirus component in Comodo Internet Security before 3.11.108364.552 allows remote attackers to cause a denial of service (memory consumption) via a crafted compressed file.CVE-2009-5125comodocomodo_internet_securityEPSS score3.58%
Comodo Internet Security before 3.9.95478.509 allows remote attackers to bypass malware detection in an RAR archive via an unspecified manipulation of the archive file format.CVE-2009-5124comodocomodo_internet_securityEPSS score2.22%
The Antivirus component in Comodo Internet Security before 3.11.108364.552 allows remote attackers to cause a denial of service (application crash) via a crafted packed file.CVE-2019-18215comodocomodo_internet_securityEPSS score0.59%
An issue was discovered in signmgr.dll 6.5.0.819 in Comodo Internet Security through 12.0. A DLL Preloading vulnerability allows an attacker to implant an unsigned DLL named iLog.dll in a partially unprotected product directory. This DLL is then loaded into a high-privileged service before the binary signature validation logic is loaded, and might bypass some of the self-defense mechanisms.