CVE-2014-7872 : Comodo GeekBuddy before 4.18.121 does not restrict access to the VNC server, whi

Comodo GeekBuddy before 4.18.121 does not restrict access to the VNC server, which allows local users to gain privileges by connecting to the server.

Published 2015-06-09 14:59:00

Updated 2016-12-06 02:59:23

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2014-7872

Comodo » Geekbuddy
Versions up to, including, (<=) 4.18.120
cpe:2.3:a:comodo:geekbuddy:*:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 24 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

http://packetstormsecurity.com/files/135841/Comodo-Internet-Security-VNC-Server-Exposure.html

Comodo Internet Security VNC Server Exposure ≈ Packet Storm
https://www.exploit-db.com/exploits/37065/

Comodo GeekBuddy < 4.18.121 - Local Privilege Escalation - Windows local Exploit

Jump to