{"id":"CVE-2019-3970","state":"PUBLISHED","title":"Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Arbitrary File Write due to Cavwp.exe handling of Comodo's Antivirus database. Cavwp.exe loads Comodo antivirus defini","description":"Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Arbitrary File Write due to Cavwp.exe handling of Comodo's Antivirus database. Cavwp.exe loads Comodo antivirus definition database in unsecured global section objects, allowing a local low privileged process to modify this data directly and change virus signatures.","publishedAt":"2019-07-17T20:34:21.000Z","updatedAt":"2024-08-04T19:26:27.668Z","severity":null,"assigner":"tenable","products":["n/a Comodo Antivirus"],"affected":[{"vendor":"n/a","product":"Comodo Antivirus","versions":[{"version":"Versions 12.0.0.6810 and below","status":"affected"}]}],"references":["https://www.tenable.com/security/research/tra-2019-34"],"weaknesses":[],"ingestedAt":"2026-10-29T19:45:59.128Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/3xxx/CVE-2019-3970.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-3970","state":"PUBLISHED","datePublished":"2019-07-17T20:34:21.000Z","dateUpdated":"2024-08-04T19:26:27.668Z","assignerShortName":"tenable","assignerOrgId":"5ac1ecc2-367a-4d16-a0b2-35d495ddd0be","dateReserved":"2019-01-03T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Arbitrary File Write due to Cavwp.exe handling of Comodo's Antivirus database. Cavwp.exe loads Comodo antivirus definition database in unsecured global section objects, allowing a local low privileged process to modify this data directly and change virus signatures."}],"affected":[{"vendor":"n/a","product":"Comodo Antivirus","versions":[{"version":"Versions 12.0.0.6810 and below","status":"affected"}]}],"references":[{"url":"https://www.tenable.com/security/research/tra-2019-34","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"description":"Arbitrary File Write","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"tenable","dateUpdated":"2019-07-17T20:34:21.000Z","orgId":"5ac1ecc2-367a-4d16-a0b2-35d495ddd0be"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"vulnreport@tenable.com","ID":"CVE-2019-3970","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Comodo Antivirus","version":{"version_data":[{"version_value":"Versions 12.0.0.6810 and below"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Arbitrary File Write due to Cavwp.exe handling of Comodo's Antivirus database. Cavwp.exe loads Comodo antivirus definition database in unsecured global section objects, allowing a local low privileged process to modify this data directly and change virus signatures."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Arbitrary File Write"}]}]},"references":{"reference_data":[{"name":"https://www.tenable.com/security/research/tra-2019-34","refsource":"MISC","url":"https://www.tenable.com/security/research/tra-2019-34"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.tenable.com/security/research/tra-2019-34","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T19:26:27.668Z"}}]}}}