CVE-2019-3972: Medium severity comodo antivirus vulnerability

Q: What is the severity of CVE-2019-3972?

CVE-2019-3972 has a high severity rating due to its potential for Denial of Service.

Q: How do I fix CVE-2019-3972?

To fix CVE-2019-3972, update to a version of Comodo Antivirus later than 12.0.0.6810.

Q: What causes CVE-2019-3972?

CVE-2019-3972 is caused by CmdAgent.exe exposing an unprotected section object that can be exploited by low privileged processes.

Q: Which versions of Comodo Antivirus are affected by CVE-2019-3972?

Comodo Antivirus versions 12.0.0.6810 and below are affected by CVE-2019-3972.

Q: Is there a workaround for CVE-2019-3972?

As of now, the most effective measure against CVE-2019-3972 is to update to a patched version of Comodo Antivirus.

Published Jul 17, 2019

Updated

Comodo Antivirus versions 12.0.0.6810 and below are vulnerable to Denial of Service affecting CmdAgent.exe via an unprotected section object "<GUID>CisSharedMemBuff". This section object is exposed by CmdAgent and contains a SharedMemoryDictionary object, which allows a low privileged process to modify the object data causing CmdAgent.exe to crash.

Affected Software

1 affected component

Comodo Antivirus<=12.0.0.6810

Event History

Jul 17, 2019

CVE Published

via MITRE·08:40 PM

Data Sourced

via MITRE·08:40 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-3972?

CVE-2019-3972 has a high severity rating due to its potential for Denial of Service.

How do I fix CVE-2019-3972?

To fix CVE-2019-3972, update to a version of Comodo Antivirus later than 12.0.0.6810.

What causes CVE-2019-3972?

CVE-2019-3972 is caused by CmdAgent.exe exposing an unprotected section object that can be exploited by low privileged processes.

Which versions of Comodo Antivirus are affected by CVE-2019-3972?

Comodo Antivirus versions 12.0.0.6810 and below are affected by CVE-2019-3972.

Is there a workaround for CVE-2019-3972?