ZDI-24-953: (0Day) Comodo Internet Security Pro Directory Traversal Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Comodo Internet Security Pro. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the update mechanism. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.
Other sources
This vulnerability allows local attackers to escalate privileges on affected installations of Comodo Internet Security Pro. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-7248.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-953?
ZDI-24-953 has been classified as a high severity vulnerability due to its potential to allow privilege escalation.
How do I fix ZDI-24-953?
To fix ZDI-24-953, update Comodo Internet Security Pro to the latest version to address the vulnerability.
What type of attacks are possible with ZDI-24-953?
ZDI-24-953 allows local attackers to escalate privileges, potentially enabling them to gain higher access rights on the system.
What are the prerequisites to exploit ZDI-24-953?
An attacker must obtain the ability to execute low-privileged code on the target system to exploit ZDI-24-953.
Which software is affected by ZDI-24-953?
ZDI-24-953 specifically affects Comodo Internet Security Pro installations.