CVE-2009-5127

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

The Antivirus component in Comodo Internet Security before 3.8.64739.471 allows remote attackers to cause a denial of service (application crash) via a crafted file.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected software

No affected versions have been published.

Timeline

Published
Aug 26, 2012
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2009

CVE-2009-51285.0The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service (memory consumption and process crash) via aCVE-2009-51295.0The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service (intermittent LDAP authentication outage) viCVE-2009-51304.3The Rules Service in Websense Email Security before 7.1 allows remote attackers to cause a denial of service (service crash) via an attachmeCVE-2009-51315.0The Receive Service in Websense Email Security before 7.1 does not recognize domain extensions in the blacklist, which allows remote attackeCVE-2009-51325.0The Filtering Service in Websense Web Security and Web Filter before 6.3.1 Hotfix 106 and 7.x before 7.1 allow remote attackers to cause a dCVE-2009-51346.8Buffer overflow in the "create torrent dialog" functionality in uTorrent 1.8.3 build 15772, and possibly other versions before 1.8.3 (Build CVE-2009-51355.0The Java XML parser in Echo before 2.1.1 and 3.x before 3.0.b6 allows remote attackers to read arbitrary files via a request containing an eCVE-2009-51364.0The policy definition evaluator in Condor before 7.4.2 does not properly handle attributes in a WANT_SUSPEND policy that evaluate to an UNDECVE-2009-51377.5Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a long URL in the [playlCVE-2009-51385.8GnuTLS before 2.7.6, when the GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT flag is not enabled, treats version 1 X.509 certificates as intermediate CACVE-2009-51397.5The SIP implementation on the Gizmo5 software phone provides hashed credentials in a response to an invalid authentication challenge, which CVE-2009-51408.8The SIP implementation on the Linksys SPA2102 phone adapter provides hashed credentials in a response to an invalid authentication challenge
CVE-2009-5127: Medium severity, CVSS 4.3 | Vulnix