CWE Code: 20
Vulnerability Type: privilege_escalation
CVSS Score: 2.1
CWE Name:  Improper Input Validation
Summary: comodo antivirus versions up to 12.0.0.6810 are vulnerable to arbitrary file write due to cavwp.exe handling of comodo's antivirus database. cavwp.exe loads comodo antivirus definition database in unsecured global section objects, allowing a local low privileged process to modify this data directly and change virus signatures.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): NONE/PARTIAL/NONE
Published Date: 2019-07-17
Last Modified Date: 2019-07-23
You are a cybersecurity expert assistant. Provide detailed information about vulnerabilities in a clear and structured format.
system
Please provide details about this vulnerability:  Improper Input Validation.
user
CWE Code: 20
Vulnerability Type: privilege_escalation
CVSS Score: 2.1
CWE Name:  Improper Input Validation
Summary: comodo antivirus versions up to 12.0.0.6810 are vulnerable to arbitrary file write due to cavwp.exe handling of comodo's antivirus database. cavwp.exe loads comodo antivirus definition database in unsecured global section objects, allowing a local low privileged process to modify this data directly and change virus signatures.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): NONE/PARTIAL/NONE
Published Date: 2019-07-17
Last Modified Date: 2019-07-23
assistant