PT-2007-2162 · Comodo · Comodo Firewall Pro

Publicado 2007-02-04 · Atualizado 2018-10-16 · CVE-2007-0709

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Comodo Firewall Pro versions 2.4.16.174 and earlier

Description The issue concerns the cmdmon.sys component in Comodo Firewall Pro, which fails to validate arguments from user mode for several hooked SSDT functions, including NtCreateSection, NtOpenProcess, NtOpenSection, NtOpenThread, and NtSetValueKey. This allows local users to potentially cause a denial of service, leading to a system crash, and possibly gain privileges by providing invalid arguments.

Recommendations For Comodo Firewall Pro versions 2.4.16.174 and earlier, update to a version later than 2.4.16.174 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2007-0709

Produtos afetados

Comodo Firewall Pro

Referências · 6

• 🔥 http://securityfocus.com/bid/22357 · Exploit
• http://securityfocus.com/archive/1/458773/100/0/threaded · Nota
• http://securitytracker.com/id?1017580 · Nota
• http://matousec.com/info/advisories/Comodo-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32059 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0709 · Nota de Segurança