cve/2019/CVE-2019-3971.md

### [CVE-2019-3971](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3971)
![](https://img.shields.io/static/v1?label=Product&message=Comodo%20Antivirus&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Denial%20of%20Service&color=brighgreen)

### Description

Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to a local Denial of Service affecting CmdVirth.exe via its LPC port "cmdvrtLPCServerPort". A low privileged local process can connect to this port and send an LPC_DATAGRAM, which triggers an Access Violation due to hardcoded NULLs used for Source parameter in a memcpy operation that is called for this handler. This results in CmdVirth.exe and its child svchost.exe instances to terminate.

### POC

#### Reference
- https://www.tenable.com/security/research/tra-2019-34
- https://www.tenable.com/security/research/tra-2019-34

#### Github
No PoCs found on GitHub currently.