4.9

CVE-2012-2273

Exploit
Comodo Internet Security before 5.10.228257.2253 on Windows 7 x64 allows local users to cause a denial of service (system crash) via a crafted 32-bit Portable Executable (PE) file with a kernel ImageBase value.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Comodo ≫ Comodo Internet Security Version <= 5.9.221665.2197
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 3.0.14.276
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 3.0.15.277
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 3.0.16.295
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 3.0.17.304
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 3.0.18.309
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 3.0.19.318
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 3.0.20.320
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 3.0.22.349
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 3.0.23.364
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 3.0.24.368
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 3.0.25.378
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 3.5.53896.424
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 3.5.54375.427
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 3.5.55810.432
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 3.5.57173.439
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 3.8.64263.468
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 3.8.64739.471
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 3.8.65951.477
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 3.9.95478.509
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 3.10.102363.531
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 3.11.108364.552
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 3.12.111745.560
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 3.13.121240.574
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 3.13.125662.579
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 3.14.130099.587
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 4.0.138377.779
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 4.0.141842.828
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 4.1.150349.920
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 5.0.163652.1142
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 5.3.174622.1216
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 5.3.175888.1227
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 5.3.176757.1236
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 5.3.181415.1237
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 5.4.189822.1355
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 5.5.195786.1383
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 5.8.211697.2124
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 5.8.213334.2131
   Microsoft ≫ Windows 7 Version -
Comodo ≫ Comodo Internet Security Version 5.9.219863.2196
   Microsoft ≫ Windows 7 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.5% 0.385
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.9 3.9 6.9
AV:L/AC:L/Au:N/C:N/I:N/A:C
CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

http://archives.neohapsis.com/archives/bugtraq/2012-04/0139.html
Exploit
http://secunia.com/advisories/48928
http://www.comodo.com/home/download/release-notes.php?p=anti-malware
http://www.securityfocus.com/bid/53163
http://www.securitytracker.com/id?1026982