Use-After-Free Vulnerability in Comodo Antivirus Sandbox Container

Use-After-Free Vulnerability in Comodo Antivirus Sandbox Container

CVE-2019-14694 · MEDIUM Severity

AV:L/AC:M/AU:N/C:N/I:N/A:C

A use-after-free flaw in the sandbox container implemented in cmdguard.sys in Comodo Antivirus 12.0.0.6870 can be triggered due to a race condition when handling IRP_MJ_CLEANUP requests in the minifilter for directory change notifications. This allows an attacker to cause a denial of service (BSOD) when an executable is run inside the container.

Learn more about our Web Application Penetration Testing UK.