PT-2006-7222 · Comodo · Comodo Personal Firewall

Publicado 2006-12-18 · Atualizado 2018-10-17 · CVE-2006-6620

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Comodo Personal Firewall version 2.3.6.81

Description The issue allows local users to bypass controls on a process by spoofing certain fields in the Process Environment Block (PEB), specifically the ImagePathName, CommandLine, and WindowTitle fields. This could potentially enable unauthorized actions.

Recommendations For Comodo Personal Firewall version 2.3.6.81, consider updating to a newer version that addresses this issue, as the current version relies on the PEB to identify processes, making it vulnerable to spoofing. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-6620

Produtos afetados

Comodo Personal Firewall

Referências · 5

• http://securityfocus.com/archive/1/454522/100/0/threaded · Nota
• http://matousec.com/downloads/windows-personal-firewall-analysis/ex-coat.zip · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-6620 · Nota de Segurança
• http://securityfocus.com/bid/21615 · Nota
• http://matousec.com/info/advisories/Bypassing-process-identification-serveral-personal-firewalls-HIPS.php · Aviso do Fabricante