Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2016-20088

Comodo Chromodo Browser 52.15.25.664 Unquoted Service Path Privilege Escalation

Description

Comodo Chromodo Browser 52.15.25.664 contains an unquoted service path vulnerability in the ChromodoUpdater service that runs with SYSTEM privileges. A local attacker can insert a malicious executable in the service path and execute arbitrary code with elevated privileges upon service restart or system reboot.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Comodo Chromodo Browser

  • 0 to ≤ 52.15.25.664affected

References