A vulnerability classified as critical was found in Comodo Internet Security Premium 12.3.4.8162. This vulnerability affects unknown code of the file cis_update_x64.xml of the component Manifest File Handler. The manipulation leads to improper validation of integrity check value. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.
The product does not validate or incorrectly validates the integrity check values or "checksums" of a message. This may prevent it from detecting if the data has been modified or corrupted in transmission.
| Link | Tags |
|---|---|
| https://vuldb.com/?id.315010 | vdb entry third party advisory |
| https://vuldb.com/?ctiid.315010 | signature vdb entry permissions required |
| https://vuldb.com/?submit.603713 | vdb entry third party advisory |
| https://drive.google.com/file/d/1qnWarYsTSc5_sV6o8ULv0LBvGfKKXPxn/view?usp=sharing | exploit third party advisory |
| https://drive.google.com/file/d/1qnWarYsTSc5_sV6o8ULv0LBvGfKKXPxn/view | exploit third party advisory |