CVE-2016-20090

Name of the Vulnerable Software and Affected Versions Comodo Dragon Browser versions prior to 52.15.25.664

Description The DragonUpdater service contains a privilege escalation flaw caused by an unquoted service path that runs with SYSTEM privileges. A local attacker can exploit this by placing a malicious executable within the service path, allowing for the execution of arbitrary code with elevated privileges when the service restarts or the system reboots.

Recommendations Update Comodo Dragon Browser to version 52.15.25.664 or later.