CVE-2016-20088

Impact

Comodo Chromodo Browser 52.15.25.664 contains an unquoted service path vulnerability in the ChromodoUpdater service that runs with SYSTEM privileges. A local attacker can insert a malicious executable in the service path and execute arbitrary code with elevated privileges upon service restart or system reboot.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• http://yildirimyunus.com
• https://www.comodo.com
• https://www.comodo.com/home/browsers-toolbars/chromodo-private-internet-browser.php
• https://www.exploit-db.com/exploits/40473
• https://www.vulncheck.com/advisories/comodo-chromodo-browser-unquoted-service-path-privilege-escalation