CVEvulnerability

CVE-2010-5185

10.0 HIGH Published 2012-08-26 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-08-26
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

The Antivirus component in Comodo Internet Security before 5.3.174622.1216 does not check whether X.509 certificates in signed executable files have been revoked, which has unknown impact and remote attack vectors.

Affected configurations

• comodo comodo internet security (<= 5.0.163652.1142) • comodo comodo internet security 3.0.14.276 • comodo comodo internet security 3.0.15.277 • comodo comodo internet security 3.0.16.295 • comodo comodo internet security 3.0.17.304 • comodo comodo internet security 3.0.18.309 • comodo comodo internet security 3.0.19.318 • comodo comodo internet security 3.0.20.320 • comodo comodo internet security 3.0.22.349 • comodo comodo internet security 3.0.23.364 • comodo comodo internet security 3.0.24.368 • comodo comodo internet security 3.0.25.378 • comodo comodo internet security 3.5.53896.424 • comodo comodo internet security 3.5.54375.427 • comodo comodo internet security 3.5.55810.432 • comodo comodo internet security 3.5.57173.439 • comodo comodo internet security 3.8.64263.468 • comodo comodo internet security 3.8.64739.471 • comodo comodo internet security 3.8.65951.477 • comodo comodo internet security 3.9.95478.509 • comodo comodo internet security 3.10.102363.531 • comodo comodo internet security 3.11.108364.552 • comodo comodo internet security 3.12.111745.560 • comodo comodo internet security 3.13.121240.574 • comodo comodo internet security 3.13.125662.579 • comodo comodo internet security 3.14.130099.587 • comodo comodo internet security 4.0.138377.779 • comodo comodo internet security 4.0.141842.828 • comodo comodo internet security 4.1.150349.920

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

Referenced by CWE · observed example (1)

  • CWE-299 Improper Check for Certificate Revocation weakness

References