CVE-2019-3970

PoC —

CVSS 3.0

5.5 medium

EPSS

<1%p34

Published

Jul 17, 2019 (Jul 17, 2019)

Modified

Jun 17, 2026

Description

Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Arbitrary File Write due to Cavwp.exe handling of Comodo's Antivirus database. Cavwp.exe loads Comodo antivirus definition database in unsecured global section objects, allowing a local low privileged process to modify this data directly and change virus signatures.

Vendors: comodo
Products: antivirus
Weakness: CWE-668
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news1 stories

Comodo Antivirus is affected by several vulnerabilities

Security AffairsJul 23, 13:57 UTC · Jul 23, 2019Vulnerability CVE-2019-3970