A vulnerability, which was classified as problematic, has been found in Comodo Dragon up to 134.0.6998.179. Affected by this issue is some unknown functionality of the component IP DNS Leakage Detector. The manipulation leads to cleartext transmission of sensitive information. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://news.fmisec.com/comodo-dragon-vulnerability | Exploit Third Party Advisory |
| https://news.fmisec.com/comodo-dragon-vulnerability | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.317774 | Permissions Required VDB Entry |
| https://vuldb.com/?id.317774 | Third Party Advisory VDB Entry |
Configurations
History
31 Jul 2025, 16:59
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Comodo
Comodo dragon |
|
| CWE | CWE-319 | |
| CPE | cpe:2.3:a:comodo:dragon:*:*:*:*:*:*:x64:* | |
| References | () https://news.fmisec.com/comodo-dragon-vulnerability - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.317774 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.317774 - Third Party Advisory, VDB Entry |
28 Jul 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
| CWE | CWE-319 |
26 Jul 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-26 19:15
Updated : 2025-07-31 16:59
NVD link : CVE-2025-8205
Mitre link : CVE-2025-8205
JSON object : View
Products Affected
comodo
- dragon
CWE
CWE-319
Cleartext Transmission of Sensitive Information