vendor:
Comodo Sandbox
by:
Joxean Koret
9,8
CVSS
CRITICAL
Comodo Sandbox Escape
287
CWE
Product Name: Comodo Sandbox
Affected Version From: Comodo Sandbox 5.0.0.0
Affected Version To: Comodo Sandbox 5.0.0.3
Patch Exists: YES
Related CWE: CVE-2018-15982
CPE: a:comodo:comodo_sandbox
Metasploit:
https://www.rapid7.com/db/vulnerabilities/centos_linux-cve-2018-15982/, https://www.rapid7.com/db/vulnerabilities/redhat_linux-cve-2018-15982/, https://www.rapid7.com/db/vulnerabilities/freebsd-cve-2018-15982/, https://www.rapid7.com/db/vulnerabilities/flash_player-cve-2018-15982/, https://www.rapid7.com/db/vulnerabilities/msft-cve-2018-15982/, https://www.rapid7.com/db/vulnerabilities/msft-cve-2018-15983/
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2018
Comodo Sandbox Escape
This exploit allows an attacker to escape from the Comodo Sandbox environment. The exploit is a proof-of-concept code that can be used to bypass the Comodo Sandbox security mechanism. The exploit works by creating a malicious executable file that is then executed in the sandbox environment. The malicious executable file contains code that will modify the system registry and allow the attacker to gain access to the system.
Mitigation:
Comodo has released a patch to address this vulnerability.
