CVE-2019-3971: Medium severity comodo antivirus vulnerability
Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to a local Denial of Service affecting CmdVirth.exe via its LPC port "cmdvrtLPCServerPort". A low privileged local process can connect to this port and send an LPCDATAGRAM, which triggers an Access Violation due to hardcoded NULLs used for Source parameter in a memcpy operation that is called for this handler. This results in CmdVirth.exe and its child svchost.exe instances to terminate.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-3971?
CVE-2019-3971 has a low severity rating, as it leads to a local Denial of Service vulnerability.
How do I fix CVE-2019-3971?
To fix CVE-2019-3971, upgrade to a version of Comodo Antivirus later than 12.0.0.6810.
What does CVE-2019-3971 affect?
CVE-2019-3971 affects Comodo Antivirus versions up to 12.0.0.6810.
What type of attack does CVE-2019-3971 involve?
CVE-2019-3971 involves a local Denial of Service attack.
Can CVE-2019-3971 be exploited by a remote attacker?
No, CVE-2019-3971 can only be exploited by a low privileged local process.