« Volver al listado

CVE-2009-5125

Estado: ModificadaMedia (4.3)—

Comodo Internet Security before 3.9.95478.509 allows remote attackers to bypass malware detection in an RAR archive via an unspecified manipulation of the archive file format.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Comodo — Comodo Internet Security

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2009-5125",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-08-26T03:17:43.480",
  "references": [
    {
      "url": "http://blog.zoller.lu/2009/04/comodo-antivirus-evasionbypass.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://personalfirewall.comodo.com/release_notes.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/503018",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/34737",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://blog.zoller.lu/2009/04/comodo-antivirus-evasionbypass.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://personalfirewall.comodo.com/release_notes.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/503018",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/34737",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Comodo Internet Security before 3.9.95478.509 allows remote attackers to bypass malware detection in an RAR archive via an unspecified manipulation of the archive file format."
    },
    {
      "lang": "es",
      "value": "Comodo Internet Security anterior a v3.9.95478.509 permite a atacantes remotos saltarse la detección de código malicioso en un fichero RAR a través de una manipulación no especificada o del formato del fichero."
    }
  ],
  "lastModified": "2026-06-16T23:15:07.860",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:comodo:comodo_internet_security:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "322EF024-016D-4197-9303-451DA665EA98",
              "versionEndIncluding": "3.8.65951.477"
            },
            {
              "criteria": "cpe:2.3:a:comodo:comodo_internet_security:3.0.14.276:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "68D4B36C-D9C8-4127-B5F0-B0463C6CCEA8"
            },
            {
              "criteria": "cpe:2.3:a:comodo:comodo_internet_security:3.0.15.277:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9D14032C-5F6F-46BF-9B75-90864B257F90"
            },
            {
              "criteria": "cpe:2.3:a:comodo:comodo_internet_security:3.0.16.295:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6172BBD4-5E63-45AE-AE95-1D52ABDD3D16"
            },
            {
              "criteria": "cpe:2.3:a:comodo:comodo_internet_security:3.0.17.304:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "789A3259-A177-4126-BABD-C97E358E5E3A"
            },
            {
              "criteria": "cpe:2.3:a:comodo:comodo_internet_security:3.0.18.309:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3FEC54C9-8640-40AA-AC6B-EF91075E926E"
            },
            {
              "criteria": "cpe:2.3:a:comodo:comodo_internet_security:3.0.19.318:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "212EEC48-A672-4DC6-81A9-794F68934E6F"
            },
            {
              "criteria": "cpe:2.3:a:comodo:comodo_internet_security:3.0.20.320:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "203DDD77-5DA2-43A5-825F-419F906284B4"
            },
            {
              "criteria": "cpe:2.3:a:comodo:comodo_internet_security:3.0.22.349:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "25C406CC-6734-467C-B776-A312B898BC2B"
            },
            {
              "criteria": "cpe:2.3:a:comodo:comodo_internet_security:3.0.23.364:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F5DE2BB5-B28D-4121-ABA3-2A38CEF69F92"
            },
            {
              "criteria": "cpe:2.3:a:comodo:comodo_internet_security:3.0.24.368:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "53E5C7F8-ACE5-44BD-9254-863E33878B10"
            },
            {
              "criteria": "cpe:2.3:a:comodo:comodo_internet_security:3.5.53896.424:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7573FD23-52AF-4528-BF6D-3186180EA2A1"
            },
            {
              "criteria": "cpe:2.3:a:comodo:comodo_internet_security:3.5.54375.427:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "824CC29D-320B-417F-B16B-C5512A5A67F5"
            },
            {
              "criteria": "cpe:2.3:a:comodo:comodo_internet_security:3.5.55810.432:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0C26BC64-02E4-454A-AF54-FB1B2237801B"
            },
            {
              "criteria": "cpe:2.3:a:comodo:comodo_internet_security:3.5.57173.439:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "22B9453D-EC9F-4C82-BE82-455CE1560647"
            },
            {
              "criteria": "cpe:2.3:a:comodo:comodo_internet_security:3.8.64263.468:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D0CBAC49-96FE-4A4C-8FAB-E08487E172DF"
            },
            {
              "criteria": "cpe:2.3:a:comodo:comodo_internet_security:3.8.64739.471:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3803F2CB-04D7-4B1D-8759-38FCA700F33E"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}