$ cve CVE-2008-0470 JSON

CVE-2008-0470 EXPLOIT

9.3

HIGH · CVSS 2.0 · EPSS 30.9% (pctl 98)

Patch early

A public exploit exists.

A certain ActiveX control in Comodo AntiVirus 2.0 allows remote attackers to execute arbitrary commands via the ExecuteStr method.

CVSS	9.3 (HIGH, v2.0)
Vector	AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS	30.85% — more likely to be exploited than 98% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2008-01-29
Last modified	2026-06-16

Vendor	Product
comodo	comodo antivirus
microsoft	activex

Source	Title	Date
exploit-db	Comodo AntiVirus 2.0 - 'ExecuteStr()' Remote Command Execution	2008-01-23