Description
Comodo Dragon Browser versions up to 52.15.25.663 contain a privilege escalation vulnerability in the DragonUpdater service due to an unquoted service path running with SYSTEM privileges. A local attacker can insert a malicious executable in the service path and execute arbitrary code with elevated privileges upon service restart or system reboot.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Comodo | Dragon Browser | ≤ 52.15.25.663 | — |
References
- ExploitDB-40471 exploit
- Official Product Homepage product
- Official Product Homepage product
- Product Reference product
- VulnCheck Advisory: Comodo Dragon Browser 52.15.25.663 Privilege Escalation via Unquoted Service Path third-party-advisory