Comodo Internet Security 0-Day Vulnerability Lets Attacker Crash the User’s Windows System

An unpatched zero-day vulnerability in Comodo Internet Security’s firewall driver, Inspect.sys, after receiving no response from the vendor following multiple disclosure attempts. The vulnerability, dubbed ComoDoS, uncovered by Marcus Hutchins, allows a remote attacker to crash a target Windows system with a single malformed IPv6 packet, bypassing all configured firewall rules in the process. At the time of publication, no patch exists. Marcus Hutchins submitted a full root-cause analysis, patch suggestions, and a proof-of-concept (PoC) to Comodo’s security team but received zero acknowledgment. Comodo Internet Security 0-Day Vulnerability The flaw resides in Inspect.sys’s IPv6 header parser. IPv6...

Read the full article at the source.