PT-2007-4045 · Comodo+1 · Comodo Personal Firewall+2

Publicado 2007-05-16 · Atualizado 2018-10-16 · CVE-2007-2729

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Comodo Firewall Pro versions 2.4.18.184 and earlier Comodo Personal Firewall versions 2.3.6.81 and earlier

Description The issue allows local users to bypass firewall rules or gain privileges by calling certain Microsoft Windows API functions in the NT kernel 5.0 and greater, via a modified identifier that is one, two, or three greater than the canonical identifier.

Recommendations For Comodo Firewall Pro version 2.4.18.184, update to a version that properly tests for equivalence of process identifiers. For Comodo Personal Firewall version 2.3.6.81, update to a version that properly tests for equivalence of process identifiers. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2007-2729

Produtos afetados

Comodo Firewall Pro

Comodo Personal Firewall

Windows

Referências · 5

• http://osvdb.org/37375 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2729 · Nota de Segurança
• http://securityreason.com/securityalert/2714 · Nota
• http://matousec.com/info/advisories/Bypassing-PWF-HIPS-open-process-control-with-uncommon-identifier.php · Aviso do Fabricante
• http://securityfocus.com/archive/1/468643/100/0/threaded · Nota