Security researcher Marcus Hutchins disclosed a critical vulnerability in Comodo Internet Security, termed ComoDoS, which allows remote attackers to cause a denial-of-service by sending a specially crafted malformed TCP/IP packet. This packet bypasses all configured firewall rules, crashing targeted Windows endpoints. Despite responsible disclosure efforts, Comodo has not responded or issued a patch. The vulnerability affects Windows systems running Comodo Internet Security and can be exploited remotely without authentication.

Successful exploitation of the ComoDoS vulnerability results in a denial-of-service condition by crashing the affected Windows endpoint. This disrupts normal operations and can potentially be leveraged to cause widespread service outages. The attack bypasses all firewall rules, making traditional network defenses ineffective against this exploit. No information about further compromise or data theft is provided.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since Comodo has not responded to the disclosure and no patch is available, organizations should consider temporarily disabling or replacing Comodo Internet Security on critical Windows endpoints to prevent exploitation. Network-level mitigations such as blocking malformed IPv6 packets may be considered if feasible. Monitor vendor channels for updates and apply official fixes once released.