Security software vendor Comodo has patched a security weakness in its GeekBuddy remote PC support tool. The vulnerability could have enabled local malware or exploits to gain admin privileges on computers. Google Project Zero researcher Tavis Ormandy recently discovered that the VNC server installed by the tool is protected by an easy-to-determine password. The password consisted of the first eight characters from the SHA1 cryptographic hash of a string made up of the computer’s Disk Caption, Disk Signature, Disk Serial Number and Disk Total Tracks. The VNC session that the password unlocks has admin privileges.”]