critical9.3Public exploit code
CVE-2008-0470
A certain ActiveX control in Comodo AntiVirus 2.0 allows remote attackers to execute arbitrary commands via the ExecuteStr method.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Comodo AntiVirus 2.0 - 'ExecuteStr()' Remote Command Execution2008-01-23 · remote · windows · Verified
Impact
A certain ActiveX control in Comodo AntiVirus 2.0 allows remote attackers to execute arbitrary commands via the ExecuteStr method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Comodo | Comodo Antivirus | Version 2.0 |
| Microsoft | Activex | All versions |