CVE-2025-8205 (CNNVD-202507-3397)
中文标题:
Comodo Dragon 安全漏洞
英文标题:
Comodo Dragon IP DNS Leakage Detector cleartext transmission
漏洞描述
中文描述:
Comodo Dragon是中国科摩多（Comodo）公司的一款网络浏览器。 Comodo Dragon 134.0.6998.179及之前版本存在安全漏洞，该漏洞源于组件IP DNS Leakage Detector导致敏感信息明文传输。
英文描述:
A vulnerability, which was classified as problematic, has been found in Comodo Dragon up to 134.0.6998.179. Affected by this issue is some unknown functionality of the component IP DNS Leakage Detector. The manipulation leads to cleartext transmission of sensitive information. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Comodo | Dragon | 134.0.6998.179 | - | - |
cpe:2.3:a:comodo:dragon:134.0.6998.179:*:*:*:*:*:*:*
|
| comodo | dragon | * | - | - |
cpe:2.3:a:comodo:dragon:*:*:*:*:*:*:x64:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
CVSS评分详情
4.0 (cna)
MEDIUMCVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
3.1 (cna)
LOWCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R
3.0 (cna)
LOWCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R
2.0 (cna)
LOWAV:N/AC:H/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:UR
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2025-8205 |
2025-11-11 15:23:36 | 2025-11-11 07:40:52 |
| NVD | nvd_CVE-2025-8205 |
2025-11-11 15:00:57 | 2025-11-11 07:48:39 |
| CNNVD | cnnvd_CNNVD-202507-3397 |
2025-11-11 15:12:51 | 2025-11-11 08:00:02 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 其他
- cnnvd_id: 未提取 -> CNNVD-202507-3397
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- affected_products_count: 1 -> 2
- data_sources: ['cve'] -> ['cve', 'nvd']