CVE-2014-7872: High severity comodo geekbuddy vulnerability
Published Jun 9, 2015
·Updated
Comodo GeekBuddy before 4.18.121 does not restrict access to the VNC server, which allows local users to gain privileges by connecting to the server.
Affected Software
1 affected component
Comodo GeekBuddy<=4.18.120
Event History
Jun 9, 2015
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-7872?
CVE-2014-7872 is classified as a high severity vulnerability due to the potential for local privilege escalation.
2
How do I fix CVE-2014-7872?
To fix CVE-2014-7872, users should upgrade to Comodo GeekBuddy version 4.18.121 or later.
3
Who is affected by CVE-2014-7872?
CVE-2014-7872 affects local users of Comodo GeekBuddy versions prior to 4.18.121.
4
What type of vulnerability is CVE-2014-7872?
CVE-2014-7872 is a local privilege escalation vulnerability related to unrestricted access to the VNC server.
5
Can CVE-2014-7872 be exploited remotely?
No, CVE-2014-7872 requires local access to exploit the vulnerability.