CVE-2008-0470

Description

A certain ActiveX control in Comodo AntiVirus 2.0 allows remote attackers to execute arbitrary commands via the ExecuteStr method.

Affected products

• Comodo / Comodo Antivirus2.0 – 2.0
• microsoft / activex

Exploits & proofs of concept

• exploit-dbComodo AntiVirus 2.0 - 'ExecuteStr()' Remote Command Executionby h07

References

• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/39904
• MISChttp://www.securityfocus.com/bid/27424
• EXPLOIThttps://www.exploit-db.com/exploits/4974