Intrusion Prevention

Comodo.AntiVirus.ActiveX.ExecuteStr.Method.Access

Description

This indicates an attempt to exploit an arbitrary command execution vulnerability in Comodo Antivirus.
The vulnerability is caused by an input validation error in the "Cavutil.Utility.1" ActiveX control, in the "ExecuteStr()" method. It allows remote attackers to execute arbitrary commands by tricking a user into visiting a specially crafted web page.

Affected Products

Comodo AntiVirus 2.0

Impact

System Compromise: remote attackers can gain control of vulnerable systems.

Recommended Actions

Set the kill bit for CLSID "309F674D-E4D3-46BD-B9E2-ED7DFD7FD176".
Microsoft Knowledge Base Article details the "kill bit" mechanism.
http://support.microsoft.com/kb/240797

CVE References

CVE-2008-0470