Description
Comodo Chromodo Browser 52.15.25.664 contains an unquoted service path vulnerability in the ChromodoUpdater service that runs with SYSTEM privileges. A local attacker can insert a malicious executable in the service path and execute arbitrary code with elevated privileges upon service restart or system reboot.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Comodo | Chromodo Browser | ≤ 52.15.25.664 | — |
References
- ExploitDB-40473 exploit
- Official Product Homepage product
- Official Product Homepage product
- Product Reference product
- VulnCheck Advisory: Comodo Chromodo Browser 52.15.25.664 Unquoted Service Path Privilege Escalation third-party-advisory