CVE-2016-20088

Name of the Vulnerable Software and Affected Versions Comodo Chromodo Browser version 52.15.25.664

Description The ChromodoUpdater service runs with SYSTEM privileges and contains an unquoted service path. This allows a local attacker to place a malicious executable within the service path to execute arbitrary code with elevated privileges when the service restarts or the system reboots.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.