Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2016-20090

Comodo Dragon Browser 52.15.25.663 Privilege Escalation via Unquoted Service Path

Description

Comodo Dragon Browser versions up to 52.15.25.663 contain a privilege escalation vulnerability in the DragonUpdater service due to an unquoted service path running with SYSTEM privileges. A local attacker can insert a malicious executable in the service path and execute arbitrary code with elevated privileges upon service restart or system reboot.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Comodo Dragon Browser

  • 0 to ≤ 52.15.25.663affected

References