← back
CVE-2016-20088

Comodo Chromodo Browser 52.15.25.664 Unquoted Service Path Privilege Escalation

CVSS 8.5 HIGHEPSS 0.1%CWE-428
Comodo Chromodo Browser 52.15.25.664 contains an unquoted service path vulnerability in the ChromodoUpdater service that runs with SYSTEM privileges. A local attacker can insert a malicious executable in the service path and execute arbitrary code with elevated privileges upon service restart or system reboot.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Comodo · Chromodo Browser
public PoCs found — 1
cve_referencewww.exploit-db.com/exploits/40473unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://www.comodo.comhttps://www.comodo.com/home/browsers-toolbars/chromodo-private-internet-browser.phphttps://www.exploit-db.com/exploits/40473https://www.vulncheck.com/advisories/comodo-chromodo-browser-unquoted-service-path-privilege-escalationhttp://yildirimyunus.com