What’s Vulnerable › Vulnerabilities

CVE-2014-7872

• Severity: high (CVSS 7.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2015-06-09 · updated 2026-06-17
• Weakness: CWE-264

Description

Comodo GeekBuddy before 4.18.121 does not restrict access to the VNC server, which allows local users to gain privileges by connecting to the server.

Affected products

• Comodo Geekbuddy: through 4.18.120

References

• http://packetstormsecurity.com/files/135841/Comodo-Internet-Security-VNC-Server-Exposure.html
• http://www.osvdb.org/122355
• https://www.exploit-db.com/exploits/37065/
• http://packetstormsecurity.com/files/135841/Comodo-Internet-Security-VNC-Server-Exposure.html
• http://www.osvdb.org/122355
• https://www.exploit-db.com/exploits/37065/

Get alerted when CVE-2014-7872 or the next vulnerability affects your stack