high7.2Public exploit code
CVE-2014-7872
Comodo GeekBuddy before 4.18.121 does not restrict access to the VNC server, which allows local users to gain privileges by connecting to the server.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Comodo GeekBuddy < 4.18.121 - Local Privilege Escalation2015-05-20 · local · windows
Impact
Comodo GeekBuddy before 4.18.121 does not restrict access to the VNC server, which allows local users to gain privileges by connecting to the server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Comodo | Geekbuddy | through 4.18.120 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/135841/Comodo-Internet-Security-VNC-Server-Exposure.html
- http://www.osvdb.org/122355
- https://www.exploit-db.com/exploits/37065/
- http://packetstormsecurity.com/files/135841/Comodo-Internet-Security-VNC-Server-Exposure.html
- http://www.osvdb.org/122355
- https://www.exploit-db.com/exploits/37065/